<? if (isset($_GET['object'])) { header("Content-Type: nothing/bad-type"); exit(); } ?> <html> <script> if (window.testRunner) testRunner.dumpAsText(); window.onload = function() { internals.updateLayoutIgnorePendingStylesheetsAndRunPostLayoutTasks(); }; </script> <object type="image/jpeg" data="nested_bad_objects.php?object"> <object type="image/jpeg" data="nested_bad_objects.php?object" /> </object> PASS - nested image objects with bad mimetype do not cause a crash. </html>