mirror of
https://github.com/LadybirdBrowser/ladybird
synced 2026-04-26 09:45:06 +02:00
d0fd5dd731
Add 18 crash tests covering various scenarios where image loading callbacks fire after an iframe has been removed from the DOM, making its document inactive. These tests cover microtasks, element tasks, batching dispatcher callbacks, decode promises, lazy loading, srcset, picture elements, nested iframes, document adoption, and iframe reattach/remove cycles.
29 lines
1016 B
HTML
29 lines
1016 B
HTML
<!DOCTYPE html>
|
|
<!-- Test: The microtask queued by update_the_image_data_impl step 8 runs after
|
|
the iframe has been removed, making the document no longer fully active.
|
|
The microtask accesses document().page(), document().encoding_parse_and_serialize_url(), etc. -->
|
|
<html class="test-wait">
|
|
<body>
|
|
<script>
|
|
const iframe = document.createElement("iframe");
|
|
iframe.src = "../../Assets/blank.html";
|
|
iframe.onload = () => {
|
|
const doc = iframe.contentDocument;
|
|
const img = doc.createElement("img");
|
|
doc.body.appendChild(img);
|
|
|
|
// Setting src queues a microtask via update_the_image_data_impl.
|
|
// Removing the iframe synchronously makes the document inactive.
|
|
// The microtask then runs on an inactive document.
|
|
img.src = "120.png";
|
|
iframe.remove();
|
|
|
|
setTimeout(() => {
|
|
document.documentElement.classList.remove("test-wait");
|
|
}, 500);
|
|
};
|
|
document.body.appendChild(iframe);
|
|
</script>
|
|
</body>
|
|
</html>
|