parser/htmlparser/tests/crashtests/563514-1.html

changeset 0
6474c204b198
equal deleted inserted replaced
-1:000000000000 0:c65c92b3c42a
1 <!DOCTYPE html>
2 <head>
3 <script>
4 function boom()
5 {
6 document.createElement("span").innerHTML = "<body a='b'>";
7 }
8 </script>
9 </head>
10 <body onload="boom();"></body>

mercurial