gecko/editor/composer/crashtests/351236-1.html

<html><head>
<title>Testcase bug 351236 - Crash [@ nsGetInterface::operator()] with designMode iframes, removing styles, removing iframes, reloading, etc</title>
<script>
function designmodes(i){
try {
window.frames[0].document.designMode='on';
window.frames[0].focus();
window.frames[0].getSelection().collapse(window.frames[0].document.body.childNodes[0],window.frames[0].document.body.childNodes[0].length-2)
window.frames[0].document.execCommand('inserthtml', false, 'tesxt ');
} catch(e) {}

setTimeout(designmodes,50);
}

function removestyles(){
document.getElementsByTagName('iframe')[0].removeAttribute('style');
document.getElementsByTagName('q')[0].removeAttribute('style');
}

function doe() {
setTimeout(designmodes,200);
setTimeout(removestyles,500);
setTimeout(function() {document.removeChild(document.documentElement);}, 1000);
setTimeout(function() {window.location.reload();}, 1500);
}
window.onload=doe;
</script>

</head>
<body>
This page should not crash Mozilla within 2 seconds<br>
<q style="display: table-row;">
<iframe style="display: table-row;"></iframe>
<iframe></iframe>
</q>
</body>
</html>