gecko-dev/dom/base/crashtests/1326194-2.html
Tobias Schneider 6bd84bf9d8 Bug 1326194 - Properly unlink observed targets. m=mrbkap r=mrbkap
MozReview-Commit-ID: EWk3kcoIteE

--HG--
extra : rebase_source : e1b68aaa8278b514c8b008db34a2519076313f7e
2017-01-19 14:51:09 -08:00

21 lines
475 B
HTML

<!DOCTYPE HTML>
<html>
<head>
<script type="application/javascript">
// Crashes if 'target' doesn't get properly unlinked in FragmentOrElement::Unlink
function crash() {
var target = document.createElement('div');
// By setting a custom prop we create a cycle between JS and C++ that requires the CC to break.
target.foo = 'bar';
var io = new IntersectionObserver(function () { }, { });
io.observe(target);
}
</script>
</head>
<body onload="crash()">
</body>
</html>