Source code
Revision control
Copy as Markdown
Other Tools
Test Info:
- Manifest: dom/base/crashtests/crashtests.list
<head>
<script>
<![CDATA[
function x()
{
 frame.onload = y;
 frame.src = "data:text/html,1";
 document.body.appendChild(frame);
 var frameRoot = frame.contentDocument.documentElement;
  function y()
  {
    var frameDoc = frameRoot.ownerDocument;
    frameRoot.appendChild(p);
    attr.w = {};
    p.setAttributeNode(attr);
    document.documentElement.removeAttribute("class");
  }
}
]]>
</script>
</head>
<body onload="setTimeout(x, 0);"></body>
</html>