diff options
Diffstat (limited to '')
| -rw-r--r-- | js/xpconnect/crashtests/938297.html | 24 |
1 files changed, 24 insertions, 0 deletions
diff --git a/js/xpconnect/crashtests/938297.html b/js/xpconnect/crashtests/938297.html new file mode 100644 index 0000000000..bd2018659b --- /dev/null +++ b/js/xpconnect/crashtests/938297.html @@ -0,0 +1,24 @@ +<!DOCTYPE html> +<html> +<head> +<meta charset="UTF-8"> +<script> + +function boom() +{ + var frame = document.getElementById("f"); + var frameWin = frame.contentWindow; + var frameDoc = frame.contentDocument; + frameDoc.write("<body>"); + frameDoc.close(); + frameWin.history.pushState(null, 'title', 'pushState47.html'); + document.body.removeChild(frame); + frameWin.history.state; +} + +</script> +</head> +<body onload="boom();"> +<iframe id="f" src="data:text/html,1"></iframe> +</body> +</html> |