content/base/crashtests/605672-1.svg

changeset 0
6474c204b198
equal deleted inserted replaced
-1:000000000000 0:92cacfc026ca
1 <svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">
2
3 <script>
4 function boom()
5 {
6 var fr = document.createElementNS("http://www.w3.org/1999/xhtml", "iframe");
7 fr.src = "data:text/html,X";
8 document.documentElement.appendChild(fr);
9 var docType = fr.contentDocument.implementation.createDocumentType(undefined, "", "");
10 document.removeChild(document.documentElement);
11 document.appendChild(docType);
12 }
13
14 window.addEventListener("load", boom, false);
15 </script>
16
17 </svg>

mercurial