wine/gecko
0
0
Fork 0
mirror of https://gitlab.winehq.org/wine/wine-gecko.git synced 2024-09-13 09:24:08 -07:00
Code Issues Packages Projects Releases Wiki Activity

Bug 502869 - crash test

Browse Source
This commit is contained in:
Martijn Wargers 2013-05-18 18:38:33 +00:00
parent 2f443314e9
commit fe3708d920
3 changed files with 28 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
parser/htmlparser/tests/crashtests/502869-iframe.html Normal file
View File

@ -0,0 +1,9 @@
<html><head><title>[HTML5] Crash [@ nsHtml5TreeBuilder::appendToCurrentNodeAndPushElementMayFoster] with document.write and removing stuff</title></head><body><a>
<script>
var x=document.getElementsByTagName("*");
x[1].parentNode.removeChild(x[1]);
x[2].parentNode.removeChild(x[2]);
</script>
<div>
<script>document.write('<'+'script>document.removeChild(document.documentElement);<'+'/script>');</script>
</a></body></html>

18
parser/htmlparser/tests/crashtests/502869.html Normal file
View File

@ -0,0 +1,18 @@
<!DOCTYPE HTML>
<html class="reftest-wait"><head>
<meta charset="utf-8">
<title>Testcase for bug 502869</title>
<script>
function done()
{
document.documentElement.removeAttribute("class");
}
</script>
</head>
<body onload="setTimeout(done,1000)">
<iframe src="502869-iframe.html"></iframe>
</body>
</html>

1
parser/htmlparser/tests/crashtests/crashtests.list
View File

@ -36,6 +36,7 @@ load 423373-1.html
load 445171-1.html load 445171-1.html
load 468538-1.xhtml load 468538-1.xhtml
load 502103.html load 502103.html
load 502869.html
load 515278-1.html load 515278-1.html
load 515533-1.html load 515533-1.html
load 515816-1.html load 515816-1.html