<html> <head> </head> <body onload="document.getElementById('o').appendChild(document.createTextNode('d'));"> <div><span id="o"><span id="a">a</span><span id="b">b‮</span><span>c</span></span></div> </body> </html>