381862.html 1.3 KB

123456789101112131415161718192021222324
  1. <html><head>
  2. <title>Testcase bug - Crash [@ nsBoxFrame::BuildDisplayListForChildren] with tree stuff in iframe toggling display</title>
  3. </head>
  4. <body>
  5. <iframe src="data:application/vnd.mozilla.xul+xml;charset=utf-8,%3Cwindow%20xmlns%3D%22http%3A//www.mozilla.org/keymaster/gatekeeper/there.is.only.xul%22%3E%0A%20%20%3Ctree%20style%3D%22display%3A%20block%3B%20position%3A%20absolute%3B%22%3E%0A%20%20%20%20%3Ctree%20style%3D%22display%3A%20table%3B%22%3E%0A%20%20%20%20%20%20%3Ctreeseparator%20style%3D%22display%3A%20block%3B%20position%3A%20absolute%3B%22%3E%0A%20%20%20%20%20%20%20%20%3Ctreechildren%20style%3D%22display%3A%20block%3B%22/%3E%0A%20%20%20%20%20%20%3C/treeseparator%3E%0A%20%20%20%20%20%20%3Ctreechildren%20style%3D%22display%3A%20none%3B%22/%3E%0A%20%20%20%20%3C/tree%3E%0A%20%20%3C/tree%3E%0A%3C/window%3E" id="content"></iframe>
  6. <script>
  7. function toggleIframe(){
  8. var x=document.getElementById('content');
  9. x.style.display = x.style.display == 'none' ? x.style.display = 'block' : x.style.display = 'none';
  10. setTimeout(toggleIframe,200);
  11. }
  12. setTimeout(toggleIframe,500);
  13. function removestyles(i){
  14. window.frames[0].document.getElementsByTagName('*')[1].removeAttribute('style');
  15. }
  16. setTimeout(removestyles,500,1);
  17. /*template*/
  18. </script>
  19. </body>
  20. </html>