summaryrefslogtreecommitdiffstats
path: root/dom/base/crashtests/1393806.html
diff options
context:
space:
mode:
Diffstat (limited to '')
-rw-r--r--dom/base/crashtests/1393806.html17
1 files changed, 17 insertions, 0 deletions
diff --git a/dom/base/crashtests/1393806.html b/dom/base/crashtests/1393806.html
new file mode 100644
index 0000000000..4e859bf602
--- /dev/null
+++ b/dom/base/crashtests/1393806.html
@@ -0,0 +1,17 @@
+<html>
+ <head>
+ <script>
+ function fun_0() {
+ document.implementation.createDocument('', '', null).adoptNode(o2);
+ }
+
+ o1 = document.createElement('map');
+ o2 = document.createElement('iframe');
+ document.documentElement.appendChild(o1);
+ document.documentElement.appendChild(o2);
+ o1.textContent = 'x';
+ document.addEventListener('DOMNodeRemoved', fun_0, false);
+ o1.innerText = 'x';
+ </script>
+ </head>
+</html>