js/xpconnect/crashtests/475185-1.html
author Emilio Cobos Álvarez <ecoal95@gmail.com>
Fri, 29 Jul 2016 10:50:26 -0700
changeset 347524 0e1f1a9c666d2ba8ddba5246fb4e705244edbeb4
parent 80085 51541b56d20d588edc5a6111d670ca5af3db39d5
permissions -rw-r--r--
Bug 1287951: followup: Know if a snapshot belongs to a HTML element in an HTML document at construction time. r=heycam MozReview-Commit-ID: eN0j8vnesa

<html xmlns="http://www.w3.org/1999/xhtml" xmlns:xul="http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul">
<head>
<script type="text/javascript">

function boom()
{
  document.body.__lookupSetter__("textContent").call(document.body);
}

</script>
</head>
<body onload="boom();"></body>
</html>