testing/web-platform/tests/html/semantics/embedded-content/the-iframe-element/hittest-detached-iframe-crash.html


1
2
3
4
5
6
7
8
9

<!DOCTYPE html>
<script>
function test() {
  document.body.offsetHeight;
  document.body.attachShadow({mode: 'closed'});
  iframe.contentDocument.caretRangeFromPoint(0, 0);
}
</script>
<iframe id="iframe" onload="test()"></iframe>