js/xpconnect/crashtests/754311-iframe.html

Thu, 22 Jan 2015 13:21:57 +0100

author
Michael Schloh von Bennewitz <michael@schloh.com>
date
Thu, 22 Jan 2015 13:21:57 +0100
branch
TOR_BUG_9701
changeset 15
b8a032363ba2
permissions
-rw-r--r--

Incorporate requested changes from Mozilla in review:
https://bugzilla.mozilla.org/show_bug.cgi?id=1123480#c6

     1 <html>
     2 <head>
     3 <script type="application/javascript">
     5 function boom() {
     6   // Don't crash when transplanting wrappers with cyclic references.
     7   document.documentElement.dataset.xml = document.documentElement.dataset;
     8   document.open();
    10   // Tell the parent window that we're done.
    11   window.parent.allDone();
    12 }
    14 // This needs to do a round-trip through the event loop to work right.
    15 window.onload = function() { setTimeout(boom, 0); };
    17 </script>
    18 </head>
    19 <body>
    20 </body>
    21 </html>

mercurial