dom/xbl/crashtests/406904-1.xhtml

changeset 0
6474c204b198
     1.1 --- /dev/null	Thu Jan 01 00:00:00 1970 +0000
     1.2 +++ b/dom/xbl/crashtests/406904-1.xhtml	Wed Dec 31 06:09:35 2014 +0100
     1.3 @@ -0,0 +1,25 @@
     1.4 +<html xmlns="http://www.w3.org/1999/xhtml" xmlns:xbl="http://www.mozilla.org/xbl">
     1.5 +<head>
     1.6 +
     1.7 +<xbl:bindings xmlns="http://www.mozilla.org/xbl"><xbl:binding id="a"><xbl:content>
     1.8 +<span>foo<xbl:children/></span>
     1.9 +</xbl:content></xbl:binding></xbl:bindings>
    1.10 +
    1.11 +<script type="text/javascript">
    1.12 +
    1.13 +function boom()
    1.14 +{
    1.15 +  var s = document.getElementById("s");
    1.16 +  var anon = document.getAnonymousNodes(s)[0];
    1.17 +
    1.18 +  while (anon.firstChild)
    1.19 +    anon.removeChild(anon.firstChild);
    1.20 +
    1.21 +  document.documentElement.style.MozBinding = "url('data:text/xml,%3Cbindings%20xmlns%3D%22http%3A%2F%2Fwww.mozilla.org%2Fxbl%22%3E%3Cbinding%20id%3D%22foo%22%3E%3Ccontent%3EQ%3C%2Fcontent%3E%3C%2Fbinding%3E%3C%2Fbindings%3E%0A')";
    1.22 +}
    1.23 +
    1.24 +</script>
    1.25 +</head>
    1.26 +
    1.27 +<body onload="boom();"><span id="s" style="-moz-binding: url('#a');"></span></body>
    1.28 +</html>

mercurial