blob: 802ae7c38520b379de8cd218be3f8123feb16f01 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
|
<!DOCTYPE HTML>
<html>
<head>
<script type="application/javascript">
// Crashes if 'target' doesn't get properly unlinked in nsINode::LastRelease
function crash() {
var target = document.getElementById('target');
var io = new IntersectionObserver(function () { }, { });
io.observe(target);
document.body.removeChild(target);
}
</script>
</head>
<body onload="crash()">
<div id="target" style="background: red; width: 50px; height: 50px"></div>
</body>
</html>
|
