Back to Chromium

Iframe Reparenting Close Window

third_party/blink/manual_tests/iframe_notifications/iframe-reparenting-close-window.html

149.0.7827.2795 B
Original Source

Bug: https://bugs.webkit.org/show\_bug.cgi?id=70147

This test recreates scenario when an iframe is reparented from one page to another using 'live iframe transfer' (with adoptNode() used on the iframe right before re-parenting into the other page's DOM tree). Then the original page is closed, destroying some internal objects that are associated with the top frame/page/WebVeiw.

In Chromium, this destroys the underlying NotificationPresenter object which is associated with the Page, and as a result, the use of webkitNotification object from JavaScript can crash the browser or return bogus results ('use-after-delete'). Open this test in Chromium and click the button to start the test. If the test doesn't crash, and prints expected results, the bug is not regressed.

Start test