js/xpconnect/crashtests/732870.html

branch
TOR_BUG_9701
changeset 15
b8a032363ba2
equal deleted inserted replaced
-1:000000000000 0:9f3504a19e50
1 <!DOCTYPE html>
2 <html class="reftest-wait">
3 <head>
4 <script>
5
6 function boom()
7 {
8 var frameDoc = document.getElementById("f").contentDocument;
9 var elem = frameDoc.documentElement;
10 elem.dataset;
11 document.adoptNode(elem);
12 frameDoc.write("0");
13 frameDoc.close();
14 document.documentElement.removeAttribute("class");
15 }
16
17 </script>
18 </head>
19
20 <body onload="boom();">
21 <iframe id="f" src="data:text/html,1"></iframe>
22 </body>
23 </html>

mercurial