dom/xbl/crashtests/464863-1.xhtml

branch
TOR_BUG_3246
changeset 7
129ffea94266
equal deleted inserted replaced
-1:000000000000 0:3301376f1d6e
1 <html xmlns="http://www.w3.org/1999/xhtml">
2 <head>
3
4 <bindings xmlns="http://www.mozilla.org/xbl"><binding id="foo"><content><qqq><children xmlns="http://www.mozilla.org/xbl"/></qqq></content></binding></bindings>
5
6 <script type="text/javascript">
7 // <![CDATA[
8
9 function boom()
10 {
11 var s = document.getElementById("s");
12 var o = document.getAnonymousNodes(s)[0];
13 (document.body).appendChild(s);
14 o.appendChild(document.createTextNode("F"));
15 }
16
17 // ]]>
18 </script>
19 </head>
20
21 <body onload="boom();"><span id="s" style="-moz-binding: url(#foo)"></span></body>
22 </html>

mercurial