diff options
Diffstat (limited to '')
| -rw-r--r-- | js/xpconnect/crashtests/754311-iframe.html | 21 |
1 files changed, 21 insertions, 0 deletions
diff --git a/js/xpconnect/crashtests/754311-iframe.html b/js/xpconnect/crashtests/754311-iframe.html new file mode 100644 index 0000000000..002817fa94 --- /dev/null +++ b/js/xpconnect/crashtests/754311-iframe.html @@ -0,0 +1,21 @@ +<html> +<head> +<script type="application/javascript"> + +function boom() { + // Don't crash when transplanting wrappers with cyclic references. + document.documentElement.dataset.xml = document.documentElement.dataset; + document.open(); + + // Tell the parent window that we're done. + window.parent.allDone(); +} + +// This needs to do a round-trip through the event loop to work right. +window.onload = function() { setTimeout(boom, 0); }; + +</script> +</head> +<body> +</body> +</html> |