gfx/tests/crashtests/421393-1.html

branch
TOR_BUG_3246
changeset 7
129ffea94266
equal deleted inserted replaced
-1:000000000000 0:38029f238a51
1 <html>
2 <head>
3 <script type="text/javascript">
4
5 function boom()
6 {
7 document.body.appendChild(document.createTextNode("\uCEDD\u5C76\u000D\uCA34"));
8 }
9
10 </script>
11 </head>
12
13 <body onload="boom();"><span>&#x202E;&#x05BC;</span></body>
14 </html>

mercurial