js/xpconnect/crashtests/851418.html
author Emilio Cobos Álvarez <ecoal95@gmail.com>
Fri, 29 Jul 2016 10:50:26 -0700
changeset 347524 0e1f1a9c666d2ba8ddba5246fb4e705244edbeb4
parent 231408 df8c49b33b2219add48ed17521fc35fc77757f87
child 419490 808600f024419fe90f24c9ace7c7cf65a4e31855
permissions -rw-r--r--
Bug 1287951: followup: Know if a snapshot belongs to a HTML element in an HTML document at construction time. r=heycam MozReview-Commit-ID: eN0j8vnesa

<!DOCTYPE html>
<html class="reftest-wait">
<head>
<meta charset="UTF-8">
<script>

function boom()
{
  var frameDoc = document.getElementById("f").contentDocument;
  var frameRoot = frameDoc.documentElement;
  frameDoc.write("");
  frameRoot.setAttribute("onload", "");
  frameRoot.onload;
  document.documentElement.removeAttribute("class");
}

</script>
</head>

<body onload="boom();">
<iframe id="f" src="data:text/html,1"></iframe>
</body>
</html>