Source code
Revision control
Copy as Markdown
Other Tools
Test Info:
- Manifest: js/xpconnect/crashtests/crashtests.list
<head>
<script type="text/javascript">
function boom()
{
var dp = document.__proto__;
dp.__proto__ = new XPCNativeWrapper(new XMLSerializer);
try {
dp.replaceChild();
} catch(e) { }
}
</script>
</head>
<body onload="boom();"></body>
</html>