blob: 72cdc242cd01dfc993bf265b4aaf1a58479bdee2 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
|
<html>
<head>
<title>Crash [@ nsContentSink::ProcessHeaderData] with meta in innerHTML</title>
</head>
<body>
<div id="testdiv">
testdiv
</div>
<script>
var x=document.createElement('div');
x.innerHTML = '<meta http-equiv="Content-Type" content="text/html;"></meta>';
document.getElementById("testdiv").appendChild(x);
</script>
some text here
</body>
</html>
|
