js/xpconnect/crashtests/732870.html
author Emilio Cobos Álvarez <ecoal95@gmail.com>
Fri, 29 Jul 2016 10:50:26 -0700
changeset 347524 0e1f1a9c666d2ba8ddba5246fb4e705244edbeb4
parent 102041 b37799afa9597e0bd77e9c37d615af4a35b4b1f1
child 419490 808600f024419fe90f24c9ace7c7cf65a4e31855
permissions -rw-r--r--
Bug 1287951: followup: Know if a snapshot belongs to a HTML element in an HTML document at construction time. r=heycam MozReview-Commit-ID: eN0j8vnesa

<!DOCTYPE html>
<html class="reftest-wait">
<head>
<script>

function boom()
{
  var frameDoc = document.getElementById("f").contentDocument;
  var elem = frameDoc.documentElement;
  elem.dataset;
  document.adoptNode(elem);
  frameDoc.write("0");
  frameDoc.close();
  document.documentElement.removeAttribute("class");
}

</script>
</head>

<body onload="boom();">
<iframe id="f" src="data:text/html,1"></iframe>
</body>
</html>