Index: LayoutTests/fast/xsl/modify-xsl-while-loading-crash.html |
diff --git a/LayoutTests/fast/xsl/modify-xsl-while-loading-crash.html b/LayoutTests/fast/xsl/modify-xsl-while-loading-crash.html |
new file mode 100644 |
index 0000000000000000000000000000000000000000..cef4a430e8214168136f146cf05e4559c6591989 |
--- /dev/null |
+++ b/LayoutTests/fast/xsl/modify-xsl-while-loading-crash.html |
@@ -0,0 +1,16 @@ |
+<!DOCTYPE html> |
+<script> |
+if (window.testRunner) |
+ testRunner.dumpAsText(); |
+ |
+onload = function() { |
+ var iframe = document.createElement('iframe'); |
+ document.getElementById("div").appendChild(iframe); |
+ var iframeDoc = iframe.contentWindow.document; |
+ var style = iframeDoc.createProcessingInstruction('xml-stylesheet', 'href="null.css" type="text/css"'); |
+ iframeDoc.insertBefore(style, iframeDoc.firstChild); |
+ style.deleteData(0, 0); |
+ style.deleteData(10, 1); |
+} |
+</script> |
+<div id="div">PASS</div> |