comparison: gfx/tests/crashtests/421393-1.html
gfx/tests/crashtests/421393-1.html
- branch
- TOR_BUG_3246
- changeset 7
- 129ffea94266
equal
deleted
inserted
replaced
|
1 <html> |
|
2 <head> |
|
3 <script type="text/javascript"> |
|
4 |
|
5 function boom() |
|
6 { |
|
7 document.body.appendChild(document.createTextNode("\uCEDD\u5C76\u000D\uCA34")); |
|
8 } |
|
9 |
|
10 </script> |
|
11 </head> |
|
12 |
|
13 <body onload="boom();"><span>‮ּ</span></body> |
|
14 </html> |