stale-inline-box-crash.html | Explore in Territory

<!DOCTYPE html>
<head>
<style>
#el0 {
  counter-reset: c 1234567890
}

.c1:before {
  content: counter(c, hangul-consonant) attr(id);
  counter-increment: c 567;
}

.c0:after {
  display: table-caption;
  content: counter(c, tigre) attr(id);
}

</style>
</head>

<body>
 PASS: did not crash.

 <q id="el0" class="c0"><q id="el1" class="c1"></q></q>

<script>
  if (window.testRunner) {
    testRunner.dumpAsText();
    testRunner.waitUntilDone();
  }

  setTimeout(function() {
    document.styleSheets[0].insertRule('.c1:only-of-type { content: counter(c, circle) attr(id); }', document.styleSheets[0].rules.length);
    document.body.offsetTop;
    document.styleSheets[0].insertRule('#el1:last-child { -webkit-column-axis:auto;cjk-earthly-branch) close-quote; counter-reset: c 976; }', document.styleSheets[0].rules.length);
    document.body.offsetTop;

    if (window.testRunner)
      testRunner.notifyDone();
  }, 0);
</script>
</body>

chromium/third_party/blink/web_tests/fast/css/counters/stale-inline-box-crash.html