Bug 1370793 - Part 2: Crashtest. r?bholley
MozReview-Commit-ID: 1vepQTv40DQ
new file mode 100644
--- /dev/null
+++ b/layout/style/crashtests/1370793-1.xhtml
@@ -0,0 +1,24 @@
+<!DOCTYPE html>
+<html xmlns="http://www.w3.org/1999/xhtml">
+ <head>
+ <bindings xmlns="http://www.mozilla.org/xbl">
+ <binding id="a">
+ <content>
+ <children/>
+ </content>
+ </binding>
+ </bindings>
+ <script>
+ function doTest() {
+ // Cause XBL bindings to be attached to the object element by
+ // wrapping it for JS.
+ document.querySelector("object");
+ }
+ </script>
+ </head>
+ <body onload="doTest()">
+ <div style="display: none;">
+ <object style="-moz-binding: url(#a);" data="about:blank"></object>
+ </div>
+ </body>
+</html>
--- a/layout/style/crashtests/crashtests.list
+++ b/layout/style/crashtests/crashtests.list
@@ -166,10 +166,11 @@ load 1319072-1.html
HTTP load 1320423-1.html
load 1321357-1.html
load 1328535-1.html
load 1331272.html
HTTP load 1333001-1.html
pref(dom.animations-api.core.enabled,true) load 1340344.html
load 1342316-1.html
load 1356601-1.html
+load 1370793-1.xhtml
load content-only-on-link-before.html
load content-only-on-visited-before.html
