summaryrefslogtreecommitdiffstats
path: root/docshell/base/crashtests/500328-1.html
diff options
context:
space:
mode:
Diffstat (limited to 'docshell/base/crashtests/500328-1.html')
-rw-r--r--docshell/base/crashtests/500328-1.html17
1 files changed, 17 insertions, 0 deletions
diff --git a/docshell/base/crashtests/500328-1.html b/docshell/base/crashtests/500328-1.html
new file mode 100644
index 000000000..fd97f84ae
--- /dev/null
+++ b/docshell/base/crashtests/500328-1.html
@@ -0,0 +1,17 @@
+<!DOCTYPE HTML>
+<html>
+<body onload="test();">
+<script>
+ function test() {
+ // Test that calling pushState() with a state object which calls
+ // history.back() doesn't crash. We need to make sure that there's at least
+ // one entry in the history before we do anything else.
+ history.pushState(null, "");
+
+ x = {};
+ x.toJSON = { history.back(); return "{a:1}"; };
+ history.pushState(x, "");
+ }
+</script>
+</body>
+</html>