
<html>

    <head>

      <base href="https://bugs.webkit.org/" />

    </head>

    <body>

      <p>

        <div>

            <b><a class="bz_bug_link 

          bz_status_NEW "

   title="NEW - WebContent crash under WebCore::CachedResource::load in WebCore::FrameLoader::outgoingReferrer const"

   href="https://bugs.webkit.org/show_bug.cgi?id=165852#c7">Comment # 7</a>

              on <a class="bz_bug_link 

          bz_status_NEW "

   title="NEW - WebContent crash under WebCore::CachedResource::load in WebCore::FrameLoader::outgoingReferrer const"

   href="https://bugs.webkit.org/show_bug.cgi?id=165852">bug 165852</a>

              from <span class="vcard"><a class="email" href="mailto:koivisto&#64;iki.fi" title="Antti Koivisto &lt;koivisto&#64;iki.fi&gt;"> <span class="fn">Antti Koivisto</span></a>

</span></b>

        <pre>I tried this but it doesn't hit the case:


&lt;iframe srcdoc=&quot;text&quot; onload=&quot;test()&quot;&gt;&lt;/iframe&gt;

&lt;script&gt;

function test() {

    const iframe = document.querySelector(&quot;iframe&quot;);

    const contentDocument = iframe.contentDocument;

    document.body.removeChild(iframe);

    const img = contentDocument.createElement(&quot;img&quot;);

    img.setAttribute(&quot;src&quot;, &quot;foo.png&quot;);

}

&lt;/script&gt;


Note that this doesn't necessarily have anything to do with srcdoc, local m_frame could be null.</pre>

        </div>

      </p>

      <hr>

      <span>You are receiving this mail because:</span>

      
      <ul>

          <li>You are the assignee for the bug.</li>

      </ul>

    </body>

</html>