Bug 1648887 - Part 1: Turn the fuzzing test script into automation test; r=smaug

The assertion crash found by fuzzing is fixed after moving useraction state from BrowsingContext to WindowContext, see bug 1611961. Differential Revision: https://phabricator.services.mozilla.com/D85752
2020-08-03 16:58:39 +00:00 · 2020-08-03 16:58:39 +00:00 · a3e3fac3e8
--- a/dom/base/test/mochitest.ini
+++ b/dom/base/test/mochitest.ini
@ -637,6 +637,7 @@ support-files = file_bug1100912.html
 [test_bug1499169.html]
 skip-if = toolkit == 'android' # Timeouts on android due to page closing issues with embedded pdf
 [test_bug1576154.html]
+[test_bug1648887.html]
 [test_caretPositionFromPoint.html]
 [test_change_policy.html]
 [test_clearTimeoutIntervalNoArg.html]
--- a/dom/base/test/test_bug1648887.html
+++ b/dom/base/test/test_bug1648887.html
@ -0,0 +1,34 @@
+<!DOCTYPE HTML>
+<html>
+<!--
+https://bugzilla.mozilla.org/show_bug.cgi?id=1648887
+-->
+<head>
+<title>Test for Bug 1648887</title>
+<script src="/tests/SimpleTest/SimpleTest.js"></script>
+<link rel="stylesheet" type="text/css" href="/tests/SimpleTest/test.css" />
+</head>
+<body>
+<a target="_blank" href="https://bugzilla.mozilla.org/show_bug.cgi?id=1648887">Mozilla Bug 1648887</a>
+<p id="display"></p>
+<iframe srcdoc="<a id='a' href='http://w'>"></iframe>
+<script class="testbody" type="text/javascript">
+
+/** Test for Bug 1648887 **/
+add_task(async function test() {
+  await SpecialPowers.pushPrefEnv({
+    set: [
+      ["dom.disable_open_during_load", false],
+    ],
+  });
+
+  let iframe = document.querySelector("iframe");
+  iframe.contentDocument.getElementById('a').click();
+  iframe.contentWindow.open(document.createElement('r').outerHTML,'','h').close();
+  ok(true, "Should not crash");
+});
+
+</script>
+</pre>
+</body>
+</html>