js/xpconnect/crashtests/938297.html

changeset 0
6474c204b198
equal deleted inserted replaced
-1:000000000000 0:ac94a4baf346
1 <!DOCTYPE html>
2 <html>
3 <head>
4 <meta charset="UTF-8">
5 <script>
6
7 function boom()
8 {
9 var frame = document.getElementById("f");
10 var frameWin = frame.contentWindow;
11 var frameDoc = frame.contentDocument;
12 frameDoc.write("<body>");
13 frameDoc.close();
14 frameWin.history.pushState(null, 'title', 'pushState47.html');
15 document.body.removeChild(frame);
16 frameWin.history.state;
17 }
18
19 </script>
20 </head>
21 <body onload="boom();">
22 <iframe id="f" src="data:text/html,1"></iframe>
23 </body>
24 </html>

mercurial