js/xpconnect/crashtests/938297.html

   1 <!DOCTYPE html>
   2 <html>
   3 <head>
   4 <meta charset="UTF-8">
   5 <script>
   6
   7 function boom()
   8 {
   9     var frame = document.getElementById("f");
  10     var frameWin = frame.contentWindow;
  11     var frameDoc = frame.contentDocument;
  12     frameDoc.write("<body>");
  13     frameDoc.close();
  14     frameWin.history.pushState(null, 'title', 'pushState47.html');
  15     document.body.removeChild(frame);
  16     frameWin.history.state;
  17 }
  18
  19 </script>
  20 </head>
  21 <body onload="boom();">
  22 <iframe id="f" src="data:text/html,1"></iframe>
  23 </body>
  24 </html>