<? | |
if (isset($_GET['object'])) { | |
header("Content-Type: nothing/bad-type"); | |
exit(); | |
} | |
?> | |
<html> | |
<script> | |
if (window.testRunner) | |
testRunner.dumpAsText(); | |
</script> | |
<object type="image/jpeg" data="nested_bad_objects.php?object"> | |
<object type="image/jpeg" data="nested_bad_objects.php?object" /> | |
</object> | |
PASS - nested image objects with bad mimetype do not cause a crash. | |
</html> |