comparison: parser/htmlparser/tests/crashtests/563514-1.html
parser/htmlparser/tests/crashtests/563514-1.html
- changeset 0
- 6474c204b198
equal
deleted
inserted
replaced
|
1 <!DOCTYPE html> |
|
2 <head> |
|
3 <script> |
|
4 function boom() |
|
5 { |
|
6 document.createElement("span").innerHTML = "<body a='b'>"; |
|
7 } |
|
8 </script> |
|
9 </head> |
|
10 <body onload="boom();"></body> |