<html xmlns="http://www.w3.org/1999/xhtml"> <head> <script> <![CDATA[ function boom() { document.body.innerHTML = '<circle xmlns="http://www.w3.org/2000/svg" onload=""/>'; } ]]> </script> </head> <body onload="boom();"></body> </html>