614499-1.html (341B)
1 <!DOCTYPE html> 2 <html> 3 <head> 4 <script> 5 6 function boom() 7 { 8 var f = document.getElementById("f"); 9 10 for (var i = 0; i < 50; ++i) { 11 f.contentWindow.history.pushState({}, ""); 12 } 13 14 document.body.removeChild(f); 15 } 16 17 </script> 18 </head> 19 <body onload="boom();"><iframe id="f" src="data:text/html,1"></iframe></body> 20 </html>