1.1 --- /dev/null Thu Jan 01 00:00:00 1970 +0000 1.2 +++ b/layout/base/crashtests/569018-1.html Wed Dec 31 06:09:35 2014 +0100 1.3 @@ -0,0 +1,17 @@ 1.4 +<!DOCTYPE html> 1.5 +<html> 1.6 +<head> 1.7 +<script type="text/javascript"> 1.8 + 1.9 +function boom() 1.10 +{ 1.11 + document.getElementById("x").appendChild(document.getElementsByTagName("map")[0]); 1.12 + document.getElementsByTagName("area")[0].appendChild(document.createElementNS("http://www.w3.org/1999/xhtml", 'span')); 1.13 + document.body.appendChild(document.createElementNS("http://www.w3.org/1999/xhtml", 'td')); 1.14 +} 1.15 + 1.16 +</script> 1.17 +</head> 1.18 + 1.19 +<body onload="setTimeout(boom, 30);"><img src="data:image/gif,GIF87a%02%00%02%00%B3%00%00%00%00%00%FF%FF%FF%00%00%00%00%00%00%FF%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%2C%00%00%00%00%02%00%02%00%00%04%03%90H%12%00%3B" usemap="#Map"><map name="Map"><area></map><span id="x"></span></body> 1.20 +</html>