content/base/crashtests/610571-1.html

Wed, 31 Dec 2014 06:09:35 +0100

author
Michael Schloh von Bennewitz <michael@schloh.com>
date
Wed, 31 Dec 2014 06:09:35 +0100
changeset 0
6474c204b198
permissions
-rw-r--r--

Cloned upstream origin tor-browser at tor-browser-31.3.0esr-4.5-1-build1
revision ID fc1c9ff7c1b2defdbc039f12214767608f46423f for hacking purpose.

michael@0 1 <!DOCTYPE html>
michael@0 2 <html class="reftest-wait">
michael@0 3 <head>
michael@0 4 <script>
michael@0 5
michael@0 6 function boom()
michael@0 7 {
michael@0 8 var frame1 = document.createElementNS("http://www.w3.org/1999/xhtml", "iframe"); frame1.src = "data:text/html,1"; document.body.appendChild(frame1);
michael@0 9 var frame2 = document.createElementNS("http://www.w3.org/1999/xhtml", "iframe"); frame2.src = "data:text/html,2"; document.body.appendChild(frame2);
michael@0 10 var frame1doc = frame1.contentDocument;
michael@0 11 var frame1root = frame1doc.documentElement;
michael@0 12 frame1root.appendChild(frame2);
michael@0 13 setTimeout(function() {
michael@0 14 try {
michael@0 15 frame2.contentDocument.q = frame1root.__lookupGetter__("nextSibling");
michael@0 16 } catch(ex) {}
michael@0 17 document.documentElement.removeAttribute("class");
michael@0 18 }, 200);
michael@0 19 }
michael@0 20
michael@0 21 </script>
michael@0 22 </head>
michael@0 23
michael@0 24 <body onload="boom();"></body>
michael@0 25 </html>
michael@0 26

mercurial