summaryrefslogtreecommitdiffstats
path: root/dom/base/crashtests/1566310.html
diff options
context:
space:
mode:
Diffstat (limited to 'dom/base/crashtests/1566310.html')
-rw-r--r--dom/base/crashtests/1566310.html24
1 files changed, 24 insertions, 0 deletions
diff --git a/dom/base/crashtests/1566310.html b/dom/base/crashtests/1566310.html
new file mode 100644
index 0000000000..f00b168b70
--- /dev/null
+++ b/dom/base/crashtests/1566310.html
@@ -0,0 +1,24 @@
+<!doctype html>
+<html>
+<head>
+<script type="text/javascript">
+function noop() {}
+function crash() {
+ let div = document.querySelector("div");
+ let ifr = document.querySelector("iframe");
+
+ // We need a reference to the iframe's window from *before* it gets detached.
+ let win = ifr.contentWindow;
+
+ div.appendChild(ifr);
+
+ win.addEventListener("beforeunload", noop);
+ win.removeEventListener("beforeunload", noop);
+}
+</script>
+</head>
+<body onload="crash()">
+ <div></div>
+ <iframe></iframe>
+</body>
+</html>