content/html/document/crashtests/564461.xhtml

branch
TOR_BUG_9701
changeset 15
b8a032363ba2
equal deleted inserted replaced
-1:000000000000 0:7cca4d6af75f
1 <html xmlns="http://www.w3.org/1999/xhtml">
2 <head>
3
4
5 <bindings xmlns="http://www.mozilla.org/xbl">
6 <binding id="editable"><content><div contenteditable="true" xmlns="http://www.w3.org/1999/xhtml"></div></content></binding>
7 </bindings>
8
9 <script type="text/javascript">
10 <![CDATA[
11
12 function boom()
13 {
14 while (document.documentElement.firstChild) document.documentElement.removeChild(document.documentElement.firstChild);
15
16 document.addEventListener("DOMSubtreeModified", function(){}, false);
17 document.addEventListener("DOMNodeInsertedIntoDocument", function(){}, false);
18 document.documentElement.appendChild(document.createElementNS("http://www.w3.org/1999/xhtml", "body"));
19 document.body.style.MozBinding = 'url(#editable)';
20 }
21
22 ]]>
23 </script></head>
24
25 <body onload="boom();"></body>
26 </html>

mercurial