diff options
Diffstat (limited to 'layout/style/crashtests/1387499.html')
| -rw-r--r-- | layout/style/crashtests/1387499.html | 15 |
1 files changed, 15 insertions, 0 deletions
diff --git a/layout/style/crashtests/1387499.html b/layout/style/crashtests/1387499.html new file mode 100644 index 0000000000..86afa3e84f --- /dev/null +++ b/layout/style/crashtests/1387499.html @@ -0,0 +1,15 @@ +<html> + <head> + <script> + try { o1 = document.createElement('code') } catch(e) { } + try { o2 = document.createElement('iframe') } catch(e) { } + try { document.documentElement.appendChild(o2) } catch(e) { } + try { o3 = o2.getSVGDocument() } catch(e) { } + try { o4 = document.caretPositionFromPoint(1, 1) } catch(e) { } + try { o3.head.appendChild(o1); } catch(e) { } + try { document.replaceChild(document.documentElement, document.documentElement); } catch(e) { } + try { document.replaceChild(o3.firstElementChild, document.documentElement); } catch(e) { } + window.close() + </script> + </head> +</html>
\ No newline at end of file |