The Tor Browser: layout/base/crashtests/379105-1.xhtml@b8a032363ba2

Incorporate requested changes from Mozilla in review:
https://bugzilla.mozilla.org/show_bug.cgi?id=1123480#c6

     1 <html xmlns="http://www.w3.org/1999/xhtml" class="reftest-wait">

     2 <head>

     3 <bindings xmlns="http://www.mozilla.org/xbl">

     5 <binding id="x"><content>

     6   <zzz><children/></zzz>

     7 </content></binding>

     9 <binding id="empty"><content>

    10 </content></binding>

    12 </bindings>

    14 <script>

    15 <![CDATA[

    17 var xbltarget;

    19 function boom1()

    20 {

    21   xbltarget = document.getElementById("xbltarget");

    22   xbltarget.style.MozBinding = "url('#x')";

    23   setTimeout(boom2, 0);

    24 }

    26 function boom2()

    27 {

    28   var nodes = SpecialPowers.unwrap(SpecialPowers.wrap(document).getAnonymousNodes(xbltarget));

    29   if (!nodes) {

    30     setTimeout(boom2, 10);

    31     return;

    32   }

    33   var anox = nodes[0];

    34   var frame = document.createElementNS("http://www.w3.org/1999/xhtml", "frame")

    35   frame.src = "data:text/html,<html><body>Hi!</body></html>";

    36   anox.appendChild(frame);

    37   xbltarget.style.MozBinding = "url('#empty')";

    39   document.documentElement.removeAttribute("class");

    40 }

    42 ]]>

    43 </script>

    44 </head>

    45 <body onload="boom1()">

    46 <div id="xbltarget"></div>

    47 </body>

    48 </html>

The Tor Browser / file revision