The Tor Browser: diff parser/htmlparser/tests/crashtests/563514-1.html

     1.1 --- /dev/null	Thu Jan 01 00:00:00 1970 +0000
     1.2 +++ b/parser/htmlparser/tests/crashtests/563514-1.html	Wed Dec 31 06:09:35 2014 +0100
     1.3 @@ -0,0 +1,10 @@
     1.4 +<!DOCTYPE html>
     1.5 +<head>
     1.6 +<script>
     1.7 +function boom()
     1.8 +{
     1.9 +  document.createElement("span").innerHTML = "<body a='b'>";
    1.10 +}
    1.11 +</script>
    1.12 +</head>
    1.13 +<body onload="boom();"></body>
    1.14 \ No newline at end of file

The Tor Browser / file diff

diff: parser/htmlparser/tests/crashtests/563514-1.html

parser/htmlparser/tests/crashtests/563514-1.html