dom/base/crashtests/609560-1.xhtml

branch
TOR_BUG_9701
changeset 15
b8a032363ba2
equal deleted inserted replaced
-1:000000000000 0:83104634c2be
1 <html xmlns="http://www.w3.org/1999/xhtml" class="reftest-wait">
2 <head>
3 <script>
4 <![CDATA[
5
6 function x()
7 {
8 var p = document.createElementNS("http://www.w3.org/1999/xhtml", "iframe");
9 var frame = document.createElementNS("http://www.w3.org/1999/xhtml", "iframe");
10 frame.onload = y;
11 frame.src = "data:text/html,1";
12 document.body.appendChild(frame);
13 var frameRoot = frame.contentDocument.documentElement;
14
15 function y()
16 {
17 var frameDoc = frameRoot.ownerDocument;
18 frameRoot.appendChild(p);
19 var attr = frameDoc.createAttributeNS("http://www.w3.org/1999/xhtml", "u");
20 attr.w = {};
21 p.setAttributeNode(attr);
22 document.documentElement.removeAttribute("class");
23 }
24 }
25
26 ]]>
27 </script>
28 </head>
29
30 <body onload="setTimeout(x, 0);"></body>
31 </html>

mercurial