Blame layout/generic/crashtests/369150-2.html

Packit f0b94e
<html class="reftest-wait">
Packit f0b94e
<head>
Packit f0b94e
<title>Bug 369150 - Crash [@ nsHTMLFramesetFrame::GetNoResize] with dynamic changes</title>
Packit f0b94e
<script>
Packit f0b94e
Packit f0b94e
function boom()
Packit f0b94e
{
Packit f0b94e
  document.getElementById("frameset").appendChild(document.createElement("frame"));
Packit f0b94e
  document.getElementById("frameset").setAttribute("rows", "100%, *"); 
Packit f0b94e
  document.documentElement.removeAttribute("class");
Packit f0b94e
}
Packit f0b94e
Packit f0b94e
</script>
Packit f0b94e
Packit f0b94e
</head>
Packit f0b94e
Packit f0b94e
 <frameset id="frameset" cols="130, *" onload="setTimeout(boom, 30);">
Packit f0b94e
   <frame src="data:text/html,foo">
Packit f0b94e
   <frame src="data:text/html,bar">
Packit f0b94e
 </frameset>
Packit f0b94e
 
Packit f0b94e
</html>