docshell/base/crashtests/614499-1.html

changeset 0
6474c204b198
equal deleted inserted replaced
-1:000000000000 0:0b60691b6f93
1 <!DOCTYPE html>
2 <html>
3 <head>
4 <script>
5
6 function boom()
7 {
8 var f = document.getElementById("f");
9
10 for (var i = 0; i < 50; ++i) {
11 f.contentWindow.history.pushState({}, "");
12 }
13
14 document.body.removeChild(f);
15 }
16
17 </script>
18 </head>
19 <body onload="boom();"><iframe id="f" src="data:text/html,1"></iframe></body>
20 </html>

mercurial