Ensure XMLDocumentParser doesn't hit a nullptr isolate while parsing …

…a fragment Bug: 376320342 Change-Id: I2be68f5bab0158121abf82aea1f5b6b71fab585c Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/6003358 Auto-Submit: Nate Chapin <japhet@chromium.org> Reviewed-by: Joey Arhar <jarhar@chromium.org> Commit-Queue: Joey Arhar <jarhar@chromium.org> Commit-Queue: Nate Chapin <japhet@chromium.org> Cr-Commit-Position: refs/heads/main@{#1379994}
web-platform-tests · Nov 7, 2024 · 1b37e8e · 1b37e8e
1 parent a3b53ac
commit 1b37e8e
Show file tree

Hide file tree

Showing 2 changed files with 15 additions and 0 deletions.
diff --git a/domparsing/createContextualFragment-in-detached-xml-document-crash.html b/domparsing/createContextualFragment-in-detached-xml-document-crash.html
@@ -0,0 +1,14 @@
+<!DOCTYPE html>
+<body>
+<iframe id="i" src="resources/dummy-xml.xml"></iframe>
+<script>
+window.onload = () => {
+  let i = document.getElementById("i");
+  var range = i.contentDocument.createRange();
+  range.setStart(i.contentDocument.firstElementChild, 0);
+  i.remove();
+
+  range.createContextualFragment('<p>Should not crash</p>');
+}
+</script>
+</body>
diff --git a/domparsing/resources/dummy-xml.xml b/domparsing/resources/dummy-xml.xml
@@ -0,0 +1 @@
+<?xml version='1.0' encoding='UTF-8'?><body/>