tor-browser

The Tor Browser
git clone https://git.dasho.dev/tor-browser.git
Log | Files | Refs | README | LICENSE

object-construct-in-document-with-null-browsing-context-crash.html (564B)

      1 <title>HTMLObjectElement: construct in a document with a null browsing context</title>
      2 <link rel="author" title="Nate Chapin" href="mailto:japhet@chromium.org">
      3 <link rel="help" href="https://html.spec.whatwg.org/C/#the-object-element">
      4 <link rel="help" href="https://bugs.chromium.org/p/chromium/issues/detail?id=1083437">
      5 <meta name="assert" content="Constructing an HTMLObjectElement in a document with a null browsing context should not crash"/>
      6 <iframe id="i"></iframe>
      7 <script>
      8 var doc = i.contentDocument;
      9 i.remove();
     10 doc.createElement('object');
     11 </script>