1.1 --- /dev/null Thu Jan 01 00:00:00 1970 +0000
1.2 +++ b/js/xpconnect/tests/mochitest/file_bug650273.html Wed Dec 31 06:09:35 2014 +0100
1.3 @@ -0,0 +1,31 @@
1.4 +<!-- test by moz_bug_r_a4@yahoo.com -->
1.5 +<body onload="a()">
1.6 +<script>
1.7 +var targetUrl = "http://example.com/";
1.8 +var l;
1.9 +
1.10 +function a() {
1.11 + var o = {};
1.12 + o.toString = function() {
1.13 + l();
1.14 + return "a";
1.15 + };
1.16 + var f = Object.getOwnPropertyDescriptor(Document.prototype, "title").set;
1.17 + setTimeout(f.bind(document), 0, o);
1.18 +}
1.19 +
1.20 +function l() {
1.21 + var l = false;
1.22 + onunload = function() {
1.23 + l = true;
1.24 + };
1.25 + location = targetUrl;
1.26 + do {
1.27 + var r = new XMLHttpRequest();
1.28 + r.open("GET", location.href, false);
1.29 + r.overrideMimeType("text/plain");
1.30 + try { r.send(null); }
1.31 + catch (e) {}
1.32 + } while (!l);
1.33 +}
1.34 +</script>
