<svg xmlns="http://www.w3.org/2000/svg">
<script>
<![CDATA[

function boom()
{
  var r = document.createElementNS("http://www.w3.org/2000/svg", "rect");
  var f = r.requiredFeatures;
  f.appendItem(1);
  document.implementation.createDocument('', '', null).adoptNode(r);
  r.getAttribute("requiredFeatures");
}

window.addEventListener("load", boom, false);

]]>
</script>
</svg>