1.1 --- /dev/null Thu Jan 01 00:00:00 1970 +0000
1.2 +++ b/js/xpconnect/crashtests/601284-1.html Wed Dec 31 06:09:35 2014 +0100
1.3 @@ -0,0 +1,22 @@
1.4 +<!DOCTYPE html>
1.5 +<html>
1.6 +<head>
1.7 +<script>
1.8 +
1.9 +function boom()
1.10 +{
1.11 + var frameRoot = document.getElementById("f").contentDocument.documentElement;
1.12 + var marquee = frameRoot.getElementsByTagName("marquee")[0];
1.13 + marquee.__proto__ = [];
1.14 + frameRoot.appendChild(marquee);
1.15 +}
1.16 +
1.17 +</script>
1.18 +</head>
1.19 +
1.20 +<body onload="boom();">
1.21 +
1.22 +<iframe id="f" src="data:application/xhtml+xml,<html xmlns='http://www.w3.org/1999/xhtml'><body><marquee></marquee></body></html>"></iframe>
1.23 +
1.24 +</body>
1.25 +</html>
