The Tor Browser: diff content/base/crashtests/326646-1.html

     1.1 --- /dev/null	Thu Jan 01 00:00:00 1970 +0000
     1.2 +++ b/content/base/crashtests/326646-1.html	Wed Dec 31 06:09:35 2014 +0100
     1.3 @@ -0,0 +1,22 @@
     1.4 +<html>
     1.5 +<head>
     1.6 +
     1.7 +<script>
     1.8 +
     1.9 +var dt;
    1.10 +
    1.11 +function init() { 
    1.12 +  dt = document.implementation.createDocumentType("rheet", 0, 2);
    1.13 +  dt.foopy = "quux";
    1.14 +}
    1.15 +
    1.16 +init();
    1.17 +
    1.18 +</script>
    1.19 +
    1.20 +</head>
    1.21 +
    1.22 +<body>
    1.23 +
    1.24 +</body>
    1.25 +</html>

The Tor Browser / file diff

diff: content/base/crashtests/326646-1.html

content/base/crashtests/326646-1.html