1.1 --- /dev/null Thu Jan 01 00:00:00 1970 +0000 1.2 +++ b/js/xpconnect/crashtests/938297.html Wed Dec 31 06:09:35 2014 +0100 1.3 @@ -0,0 +1,24 @@ 1.4 +<!DOCTYPE html> 1.5 +<html> 1.6 +<head> 1.7 +<meta charset="UTF-8"> 1.8 +<script> 1.9 + 1.10 +function boom() 1.11 +{ 1.12 + var frame = document.getElementById("f"); 1.13 + var frameWin = frame.contentWindow; 1.14 + var frameDoc = frame.contentDocument; 1.15 + frameDoc.write("<body>"); 1.16 + frameDoc.close(); 1.17 + frameWin.history.pushState(null, 'title', 'pushState47.html'); 1.18 + document.body.removeChild(frame); 1.19 + frameWin.history.state; 1.20 +} 1.21 + 1.22 +</script> 1.23 +</head> 1.24 +<body onload="boom();"> 1.25 +<iframe id="f" src="data:text/html,1"></iframe> 1.26 +</body> 1.27 +</html>