summaryrefslogtreecommitdiff
path: root/layout/forms/crashtests/375299.html
blob: fd43d1c630f4bd410d77ec193b609d194b1084a7 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
<html><head>
<title>Testcase bug - Crash [@ nsFileControlFrame::CreateAnonymousContent] when removing stylesheet with binding and removing file input</title>
<style>
body {-moz-binding:url("375299-binding.xml#a"); }
</style>
</head><body onload="doe()">
<input type="file">

<script>
function doe() {
var x=document.getElementsByTagName('input')[0];
x.parentNode.removeChild(x);
var y=document.getElementsByTagName('style')[0];
y.parentNode.removeChild(y);
}
</script>
</body></html>