third_party/WebKit/LayoutTests/fast/dom/HTMLBodyElement/body-inserting-iframe-crash.html

   1 <script>
   2 if (window.testRunner)
   3     testRunner.dumpAsText();
   4
   5 var iframe = null;
   6
   7 function start() {
   8     iframe = document.createElement('iframe');
   9     iframe.setAttribute('marginwidth', 1);
  10     document.body.appendChild(iframe);
  11
  12     var bodyInFrame = document.createElement('body');
  13     bodyInFrame.addEventListener('DOMSubtreeModified', removeIframe);
  14     iframe.contentDocument.documentElement.appendChild(bodyInFrame);
  15     document.body.innerHTML = 'PASS if not crashed.';
  16 }
  17
  18 function removeIframe() {
  19     iframe.parentNode.removeChild(iframe);
  20     iframe = null;
  21     gc();
  22 }
  23 </script>
  24 <body onload="start()">
  25 </body>