parser/htmlparser/tests/crashtests/502869-iframe.html

changeset 0
6474c204b198
     1.1 --- /dev/null	Thu Jan 01 00:00:00 1970 +0000
     1.2 +++ b/parser/htmlparser/tests/crashtests/502869-iframe.html	Wed Dec 31 06:09:35 2014 +0100
     1.3 @@ -0,0 +1,9 @@
     1.4 +<html><head><title>[HTML5] Crash [@ nsHtml5TreeBuilder::appendToCurrentNodeAndPushElementMayFoster] with document.write and removing stuff</title></head><body><a>
     1.5 +<script>
     1.6 +var x=document.getElementsByTagName("*"); 
     1.7 +x[1].parentNode.removeChild(x[1]);
     1.8 +x[2].parentNode.removeChild(x[2]);
     1.9 +</script>
    1.10 +<div>
    1.11 +<script>document.write('<'+'script>document.removeChild(document.documentElement);<'+'/script>');</script>
    1.12 +</a></body></html>

mercurial