summaryrefslogtreecommitdiff
path: root/js/xpconnect/crashtests/754311-iframe.html
blob: 002817fa94ada71c0dcf56e26926468ba3101fa2 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
<html>
<head>
<script type="application/javascript">

function boom() {
  // Don't crash when transplanting wrappers with cyclic references.
  document.documentElement.dataset.xml = document.documentElement.dataset;
  document.open();

  // Tell the parent window that we're done.
  window.parent.allDone();
}

// This needs to do a round-trip through the event loop to work right.
window.onload = function() { setTimeout(boom, 0); };

</script>
</head>
<body>
</body>
</html>