js/xpconnect/crashtests/515726-1.html
author Bobby Holley <bobbyholley@gmail.com>
Fri, 14 Oct 2011 10:52:47 -0700
changeset 78738 51541b56d20d588edc5a6111d670ca5af3db39d5
parent 59142 js/src/xpconnect/crashtests/515726-1.html@d3cd88470ed507ab0de1b025f1f1e59ca610dfa4
permissions -rw-r--r--
Bug 691411 - Move js/src/xpconnect to js/xpconnect and rename source files while we're at it. r=khuey, sr=mrbkap

<html>
<head>
<script>

function boom()
{
  var frame = document.createElementNS("http://www.w3.org/1999/xhtml", "iframe");

  document.documentElement.appendChild(frame);
  var framedoc = frame.contentDocument;
  document.documentElement.removeChild(frame);

  framedoc.removeChild(framedoc.documentElement);
  framedoc.appendChild(frame);

  try { frame.appendChild(undefined); } catch(e) { }

  document.removeChild(document.documentElement);
  document.appendChild(frame);
}

</script>
</head>

<body onload="boom();"></body>
</html>