comparison: layout/base/crashtests/414058-1.html
layout/base/crashtests/414058-1.html
- branch
- TOR_BUG_9701
- changeset 15
- b8a032363ba2
equal
deleted
inserted
replaced
|
1 <html> |
|
2 <head> |
|
3 <script type="text/javascript"> |
|
4 |
|
5 function boom() |
|
6 { |
|
7 document.documentElement.style.MozBinding = "url('#none')"; |
|
8 document.body.offsetHeight; |
|
9 document.removeChild(document.documentElement) |
|
10 document.appendChild(document.createElement("div")); |
|
11 } |
|
12 |
|
13 </script> |
|
14 </head> |
|
15 |
|
16 <body onload="boom();"></body> |
|
17 </html> |