dom/base/crashtests/610571-1.html


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26

<!DOCTYPE html>
<html class="reftest-wait">
<head>
<script>

function boom()
{
  var frame1 = document.createElementNS("http://www.w3.org/1999/xhtml", "iframe"); frame1.src = "data:text/html,1"; document.body.appendChild(frame1);
  var frame2 = document.createElementNS("http://www.w3.org/1999/xhtml", "iframe"); frame2.src = "data:text/html,2"; document.body.appendChild(frame2);
  var frame1doc = frame1.contentDocument;
  var frame1root = frame1doc.documentElement;
  frame1root.appendChild(frame2);
  setTimeout(function() { 
    try {
      frame2.contentDocument.q = frame1root.__lookupGetter__("nextSibling");
    } catch(ex) {}
    document.documentElement.removeAttribute("class");
  }, 200);
}

</script>
</head>

<body onload="boom();"></body>
</html>