mirror of
https://github.com/LadybirdBrowser/ladybird.git
synced 2025-07-03 07:32:00 +00:00
d417b75683
This avoids a crash that occurred when calling `getBBox()` on an SVG element that had a transform with no inverse. Found by Domato.
12 lines
373 B
HTML
12 lines
373 B
HTML
<!DOCTYPE html>
|
|
<script src="../include.js"></script>
|
|
<svg xmlns="http://www.w3.org/2000/svg">
|
|
<rect id="rectElement" x="0" y="0" width="100" height="100" transform="scale(0)" />
|
|
</svg>
|
|
<script>
|
|
test(() => {
|
|
const rectElement = document.getElementById("rectElement");
|
|
rectElement.getBBox();
|
|
println("PASS (didn't crash)");
|
|
});
|
|
</script>
|