layout/generic/crashtests/471360.html
author Noemi Erli <nerli@mozilla.com>
Sat, 12 Jan 2019 00:00:06 +0200
changeset 453615 1ddef6cf6c7ee86191872cac0782b9f6dc01c923
parent 424605 135a5aa350b744463c14405064138963d5b8a339
child 491931 bb59a0c3716298bd4645885b530d501809715541
permissions -rw-r--r--
Merge mozilla-central to inbound. a=merge CLOSED TREE

<html>
<head>
<script type="text/javascript">

var ta, f, tb, s, tc;
var i = 0;

function boom1()
{
  var r = document.body; 
  while(r.firstChild) 
    r.removeChild(r.firstChild);

  ta = document.createTextNode("A \u06cc");
  (document.body).appendChild(ta);
  f = document.createElement("IFRAME");
  f.style.height = "15em";
  f.src = "data:text/html," + "Iteration " + ++i;
  (document.body).appendChild(f);
  tb = document.createTextNode(" B ");
  (document.body).appendChild(tb);
  s = document.createElement("span");
  s.id = "s";
  tc = document.createTextNode(" C ");
  (document.body).appendChild(s);
  s.appendChild(tc);

  setTimeout(boom2, 10);
}

function boom2()
{
  var w = document.createElement("style");
  w.setAttribute("type", "text/css");
  w.appendChild(document.createTextNode("body { -moz-column-gap: 1px; -moz-column-width: 1px; }"));
  document.body.appendChild(w);

  setTimeout(boom3, 10);
}

function boom3()
{
  ta.data = " E " + ta.data;
  document.body.removeChild(s);

  setTimeout(boom1, 10);
}

</script>
</head>

<body onload="boom1();"></body>
</html>