comparison: dom/xml/crashtests/994740-1.xhtml
dom/xml/crashtests/994740-1.xhtml
- branch
- TOR_BUG_9701
- changeset 15
- b8a032363ba2
equal
deleted
inserted
replaced
|
1 <html xmlns="http://www.w3.org/1999/xhtml"> |
|
2 <head> |
|
3 <script> |
|
4 <![CDATA[ |
|
5 |
|
6 function boom() |
|
7 { |
|
8 document.createElement("head").innerHTML = "<"; |
|
9 } |
|
10 |
|
11 ]]> |
|
12 </script></head> |
|
13 |
|
14 <body onload="boom();"></body> |
|
15 </html> |