The Tor Browser: diff layout/generic/crashtests/494283-2.html

     1.1 --- /dev/null	Thu Jan 01 00:00:00 1970 +0000
     1.2 +++ b/layout/generic/crashtests/494283-2.html	Wed Dec 31 06:09:35 2014 +0100
     1.3 @@ -0,0 +1,6 @@
     1.4 +<body>
     1.5 +  <fieldset id="x"><legend>longlonglong</legend></fieldset>
     1.6 +  <script>
     1.7 +    var x = document.getElementById("x");
     1.8 +    x.insertBefore(document.createTextNode("aa"), x.firstChild);
     1.9 +  </script>

The Tor Browser / file diff

diff: layout/generic/crashtests/494283-2.html

layout/generic/crashtests/494283-2.html