mirror of
https://github.com/LadybirdBrowser/ladybird
synced 2026-04-26 09:45:06 +02:00
d0fd5dd731
Add 18 crash tests covering various scenarios where image loading callbacks fire after an iframe has been removed from the DOM, making its document inactive. These tests cover microtasks, element tasks, batching dispatcher callbacks, decode promises, lazy loading, srcset, picture elements, nested iframes, document adoption, and iframe reattach/remove cycles.
29 lines
974 B
HTML
29 lines
974 B
HTML
<!DOCTYPE html>
|
|
<!-- Test: Image with srcset attribute inside an iframe that gets removed.
|
|
The srcset parsing and source selection runs via the microtask in
|
|
update_the_image_data_impl, and may access document properties
|
|
after the document becomes inactive. -->
|
|
<html class="test-wait">
|
|
<body>
|
|
<script>
|
|
const imageUrl = new URL("../../Assets/120.png", document.baseURI).href;
|
|
const iframe = document.createElement("iframe");
|
|
iframe.src = "../../Assets/blank.html";
|
|
iframe.onload = () => {
|
|
const doc = iframe.contentDocument;
|
|
const img = doc.createElement("img");
|
|
img.srcset = imageUrl + " 1x, " + imageUrl + " 2x";
|
|
doc.body.appendChild(img);
|
|
|
|
// Remove iframe immediately after setting srcset.
|
|
iframe.remove();
|
|
|
|
setTimeout(() => {
|
|
document.documentElement.classList.remove("test-wait");
|
|
}, 500);
|
|
};
|
|
document.body.appendChild(iframe);
|
|
</script>
|
|
</body>
|
|
</html>
|