object-crash-regression.html (483B)
1 <!DOCTYPE html> 2 <title>Object element moveBefore() regression test</title> 3 <script src="/resources/testharness.js"></script> 4 <script src="/resources/testharnessreport.js"></script> 5 <body> 6 7 <b id="p"><object> 8 9 <script> 10 test(t => { 11 // Per https://crbug.com/373924127, simply moving an object element would 12 // crash, due to an internal subframe count mechanism getting out of sync. 13 p.moveBefore(p.lastChild, p.firstChild); 14 }, "Moving an object element does not crash"); 15 </script>