gfx/tests/crashtests/419095-1.html

branch
TOR_BUG_3246
changeset 7
129ffea94266
equal deleted inserted replaced
-1:000000000000 0:b9b6b61f3db8
1 <!DOCTYPE html>
2 <html>
3 <head>
4 <script type="text/javascript">
5
6 function boom()
7 {
8 document.body.appendChild(document.createTextNode(String.fromCharCode(0x202E)));
9 document.body.appendChild(document.createTextNode(String.fromCharCode(0x000D)));
10 document.body.appendChild(document.createTextNode(String.fromCharCode(0x200D)));
11 document.body.appendChild(document.createTextNode(String.fromCharCode(0xD75A)));
12 document.body.appendChild(document.createTextNode(String.fromCharCode(0xD63F)));
13 }
14
15 </script>
16 </head>
17
18 <body onload="boom();">
19 </body>
20 </html>

mercurial