diff options
Diffstat (limited to '')
| -rw-r--r-- | dom/base/crashtests/343850-1.xhtml | 28 |
1 files changed, 28 insertions, 0 deletions
diff --git a/dom/base/crashtests/343850-1.xhtml b/dom/base/crashtests/343850-1.xhtml new file mode 100644 index 0000000000..4bf313062d --- /dev/null +++ b/dom/base/crashtests/343850-1.xhtml @@ -0,0 +1,28 @@ +<html xmlns="http://www.w3.org/1999/xhtml" class="reftest-wait"> +<head> + +<script> +<![CDATA[ + +function boom() +{ + var div = document.getElementById("div"); + var embed = document.getElementById("embed"); + embed.setAttribute("src", "javascript:'QQQQ'"); + embed.removeAttribute("src"); + document.body.appendChild(div); + + document.documentElement.removeAttribute("class"); +} + +]]> +</script> + +</head> + +<body onload="setTimeout(boom, 30);"> + +<div id="div"><embed id="embed"/></div> + +</body> +</html> |