diff options
Diffstat (limited to 'dom/base/crashtests/693212.xhtml')
| -rw-r--r-- | dom/base/crashtests/693212.xhtml | 16 |
1 files changed, 16 insertions, 0 deletions
diff --git a/dom/base/crashtests/693212.xhtml b/dom/base/crashtests/693212.xhtml new file mode 100644 index 000000000..6cc600d3b --- /dev/null +++ b/dom/base/crashtests/693212.xhtml @@ -0,0 +1,16 @@ +<html xmlns="http://www.w3.org/1999/xhtml"> +<head> +<script type="text/javascript"> + function boom() { + select = document.createElementNS("http://www.w3.org/1999/xhtml", "select"); + text = document.body.childNodes[0]; + select.setAttribute("onDOMSubtreeModified", "text.parentNode.removeChild(text);"); + select.appendChild(text); + } +</script> +</head> + +<body onload="boom()"> + +</body> +</html> |