The Tor Browser / file comparison
comparison: dom/bindings/crashtests/869038.html
dom/bindings/crashtests/869038.html
- branch
- TOR_BUG_3246
- changeset 7
- 129ffea94266
equal
deleted
inserted
replaced
| -1:000000000000 | 0:16ed436a957d |
|---|---|
| 1 <!DOCTYPE html> | |
| 2 <html> | |
| 3 <head> | |
| 4 <meta charset="UTF-8"> | |
| 5 <script> | |
| 6 | |
| 7 function boom() | |
| 8 { | |
| 9 var frame = document.createElementNS("http://www.w3.org/1999/xhtml", "iframe"); | |
| 10 document.body.appendChild(frame); | |
| 11 var frameDoc = frame.contentDocument; | |
| 12 frameDoc.contentEditable = "true"; | |
| 13 document.body.removeChild(frame); | |
| 14 SpecialPowers.gc(); | |
| 15 frameDoc.focus(); | |
| 16 } | |
| 17 | |
| 18 </script> | |
| 19 </head> | |
| 20 | |
| 21 <body onload="boom();"></body> | |
| 22 </html> |
