Bug 1660051 [wpt PR 25111] - Origin isolation: expand getter test coverage, a=testonly
[gecko.git] / dom / base / crashtests / 474041-1.svg
blob2b8351472cdd2d75ad5174008ceab4fef06a89a7
1 <svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" onload="boom();">
3 <rect id="r"/><use id="u" xlink:href="#r"><rect id="r"/></use>
5 <script type="text/javascript">
7 function boom()
9 var r1 = document.getElementsByTagName("rect")[0]; // the first node with id="r"
10 var use = document.getElementById("u");
11 document.documentElement.insertBefore(use, r1);
12 r1.appendChild(use);
15 </script>
17 </svg>