mirror of
https://github.com/LadybirdBrowser/ladybird
synced 2026-04-27 10:07:15 +02:00
13 lines
312 B
HTML
13 lines
312 B
HTML
<!DOCTYPE html>
|
|
<link rel="help" href="https://bugs.chromium.org/p/chromium/issues/detail?id=1439692">
|
|
<style>
|
|
body, fieldset { contain: strict; }
|
|
</style>
|
|
<script>
|
|
function crash() {
|
|
document.body.offsetTop;
|
|
document.body.appendChild(document.createElement("fieldset"));
|
|
}
|
|
</script>
|
|
<body onload="crash()">
|