Source code
Revision control
Copy as Markdown
Other Tools
Test Info:
- Manifest: dom/base/crashtests/crashtests.list
<head>
<script>
<![CDATA[
function x()
{
frame.onload = y;
frame.src = "data:text/html,1";
document.body.appendChild(frame);
var frameRoot = frame.contentDocument.documentElement;
function y()
{
var frameDoc = frameRoot.ownerDocument;
frameRoot.appendChild(p);
attr.w = {};
p.setAttributeNode(attr);
document.documentElement.removeAttribute("class");
}
}
]]>
</script>
</head>
<body onload="setTimeout(x, 0);"></body>
</html>