1.1 --- /dev/null Thu Jan 01 00:00:00 1970 +0000
1.2 +++ b/content/base/crashtests/420620-1.html Wed Dec 31 06:09:35 2014 +0100
1.3 @@ -0,0 +1,29 @@
1.4 +<!DOCTYPE html>
1.5 +<html>
1.6 +<head>
1.7 +<script type="text/javascript">
1.8 +
1.9 +function boom()
1.10 +{
1.11 + var a = document.documentElement;
1.12 + var b = document.body;
1.13 +
1.14 + document.removeChild(a);
1.15 + b.contentEditable = "true";
1.16 + document.appendChild(a);
1.17 +
1.18 + function t() {
1.19 + document.removeEventListener("DOMAttrModified", t, false);
1.20 + document.removeChild(a);
1.21 + }
1.22 +
1.23 + document.addEventListener("DOMAttrModified", t, false);
1.24 + document.execCommand("insertunorderedlist", false, "<h1>");
1.25 + document.removeEventListener("DOMAttrModified", t, false);
1.26 +}
1.27 +
1.28 +</script>
1.29 +</head>
1.30 +
1.31 +<body onload="boom()"></body>
1.32 +</html>
