dom/html/crashtests/673853.html
author Serban Stanca <sstanca@mozilla.com>
Thu, 17 Jul 2025 20:21:32 +0300 (5 hours ago)
changeset 797003 7ec5a911287f51bc177058928bb102163a3b656e
parent 212357 8ccc36e1d05cb871a3e6a0632fb2e0c652a9d58d
permissions -rw-r--r--
Revert "Bug 1977690 - Remove unused AppRequestInterceptor in androidTests r=aaronmt" for causing fenix-debug failures. This reverts commit bc9dc5f4296482e17560627acaacd2797e462211.
<!DOCTYPE html>
<html>
<head>
<script>

function boom()
{
  var otherDoc = document.implementation.createDocument('', '', null);
  var input = otherDoc.createElementNS("http://www.w3.org/1999/xhtml", "input");
  var form = otherDoc.createElementNS("http://www.w3.org/1999/xhtml", "form");
  input.setAttributeNS(null, "form", "x");
  form.setAttributeNS(null, "id", "x");
  input.appendChild(form);
  otherDoc.appendChild(input);
}

</script>
</head>
<body onload="boom();"></body>
</html>