summaryrefslogtreecommitdiff
path: root/layout/generic/crashtests/369150-2.html
blob: 59215b14a6ce8a5b56dcf1793c6b0fda621e04fe (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
<html class="reftest-wait">
<head>
<title>Bug 369150 - Crash [@ nsHTMLFramesetFrame::GetNoResize] with dynamic changes</title>
<script>

function boom()
{
  document.getElementById("frameset").appendChild(document.createElement("frame"));
  document.getElementById("frameset").setAttribute("rows", "100%, *"); 
  document.documentElement.removeAttribute("class");
}

</script>

</head>

 <frameset id="frameset" cols="130, *" onload="setTimeout(boom, 30);">
   <frame src="data:text/html,foo">
   <frame src="data:text/html,bar">
 </frameset>
 
</html>