third_party/WebKit/LayoutTests/fast/frames/javascript-url-as-framesrc-crash.html

   1 <head>
   2 <script language="JavaScript">
   3 // See https://bugs.webkit.org/show_bug.cgi?id=26230
   4
   5 if (window.testRunner) {
   6     testRunner.dumpAsText();
   7 }
   8
   9 function makeFrameContents() {
  10     var doc = theFrame.document;
  11     doc.open();
  12     doc.write('<img src=no-image-resource-required.png>');
  13     doc.close();
  14     return "SUCCESS (as long as we didn't crash, claim victory)";
  15 }
  16 </script>
  17 </head>
  18
  19 <frameset>
  20     <frame name="theFrame" src="javascript:parent.makeFrameContents()">
  21 </frameset>