parser/htmlparser/tests/mochitest/bug_502091_iframe.html@44a2da4a2ab2
parser/htmlparser/tests/mochitest/bug_502091_iframe.html
Fri, 16 Jan 2015 04:50:19 +0100
- author
- Michael Schloh von Bennewitz <michael@schloh.com>
- date
- Fri, 16 Jan 2015 04:50:19 +0100
- branch
- TOR_BUG_9701
- changeset 13
- 44a2da4a2ab2
- permissions
- -rw-r--r--
Replace accessor implementation with direct member state manipulation, by
request https://trac.torproject.org/projects/tor/ticket/9701#comment:32
1 <html>
2 <head>
3 <title>Crash [@ nsContentSink::ProcessHeaderData] with meta in innerHTML</title>
4 </head>
5 <body>
6 <div id="testdiv">
7 testdiv
8 </div>
9 <script>
10 var x=document.createElement('div');
11 x.innerHTML = '<meta http-equiv="Content-Type" content="text/html;"></meta>';
12 document.getElementById("testdiv").appendChild(x);
13 </script>
14 some text here
15 </body>
16 </html>
