summaryrefslogtreecommitdiff
path: root/docshell/base/crashtests/1341657.html
blob: 852b8cc80dbc9b5cc4b13abfaa2b4e262b11936d (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
<html>
    <head>
        <script>
            o1 = document.createElement("script");
            o2 = document.implementation.createDocument('', '', null);
            o3 = document.createElement("iframe");
            document.documentElement.appendChild(o3);
            o4 = o3.contentWindow;
            o5 = document.createTextNode('o2.adoptNode(o3); try { o4.location = "" } catch(e) {}');
            o1.appendChild(o5);
            document.documentElement.appendChild(o1);
        </script>
    </head>
</html>