Comment 58 for bug 216699

Created attachment 579983
Simple test case

I reproduced the issue by creating an iframe element and then writing to its ownerDocument without opening & closing it.

Simple enough?