1.1 --- /dev/null Thu Jan 01 00:00:00 1970 +0000 1.2 +++ b/content/base/crashtests/693212.xhtml Wed Dec 31 06:09:35 2014 +0100 1.3 @@ -0,0 +1,16 @@ 1.4 +<html xmlns="http://www.w3.org/1999/xhtml"> 1.5 +<head> 1.6 +<script type="text/javascript"> 1.7 + function boom() { 1.8 + select = document.createElementNS("http://www.w3.org/1999/xhtml", "select"); 1.9 + text = document.body.childNodes[0]; 1.10 + select.setAttribute("onDOMSubtreeModified", "text.parentNode.removeChild(text);"); 1.11 + select.appendChild(text); 1.12 + } 1.13 +</script> 1.14 +</head> 1.15 + 1.16 +<body onload="boom()"> 1.17 + 1.18 +</body> 1.19 +</html>