Files
tubestation/testing/web-platform/tests/domparsing/createContextualFragment-in-detached-xml-document-crash.html
Nate Chapin d2daaccda7 Bug 1929959 [wpt PR 49037] - Ensure XMLDocumentParser doesn't hit a nullptr isolate while parsing a fragment, a=testonly
Automatic update from web-platform-tests
Ensure XMLDocumentParser doesn't hit a nullptr isolate while parsing a fragment

Bug: 376320342
Change-Id: I2be68f5bab0158121abf82aea1f5b6b71fab585c
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/6003358
Auto-Submit: Nate Chapin <japhet@chromium.org>
Reviewed-by: Joey Arhar <jarhar@chromium.org>
Commit-Queue: Joey Arhar <jarhar@chromium.org>
Commit-Queue: Nate Chapin <japhet@chromium.org>
Cr-Commit-Position: refs/heads/main@{#1379994}

--

wpt-commits: 1b37e8e3d227ee4267f4863e6a99c1a83efa7769
wpt-pr: 49037
2024-11-09 19:23:22 +00:00

15 lines
352 B
HTML

<!DOCTYPE html>
<body>
<iframe id="i" src="resources/dummy-xml.xml"></iframe>
<script>
window.onload = () => {
let i = document.getElementById("i");
var range = i.contentDocument.createRange();
range.setStart(i.contentDocument.firstElementChild, 0);
i.remove();
range.createContextualFragment('<p>Should not crash</p>');
}
</script>
</body>