summaryrefslogtreecommitdiffstats
path: root/editor/libeditor/crashtests/612565-1.html
blob: 8df4283f8da9ea326c224e6c04fdc10327257811 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
<!DOCTYPE html>
<html>
  <body>
    <iframe></iframe>
  </body>
  <script>
    onload = function() {
      var i = document.querySelector("iframe");
      var doc = i.contentDocument;
      doc.body.appendChild(doc.createTextNode("foo"));
      doc.designMode = "on";
      while (doc.body.firstChild) {
        doc.body.firstChild.remove();
      }
    };
  </script>
</html>