Test should not crash.
Test does replaceStates both from the main frame and from an iframe and makes sure they both count against state object count limit.