summaryrefslogtreecommitdiffstats
path: root/dom/html/crashtests/1704660.html
blob: 01497975dfcba892837a8806e341ff51e8ac1d02 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
<html>
  <head>
    <script>
      function test() {
        var ifr = document.getElementsByTagName("iframe")[0];
        var form = ifr.contentDocument.getElementsByTagName("form")[0];
        form.onsubmit = function() {
          ifr.remove()
        }
        form.lastChild.click();
      }
    </script>
  </head>
  <body onload="test()">
    <iframe srcdoc="<form><input name=f type=file><button></button></form>"></iframe>
  </body>
</html>