diff options
Diffstat (limited to 'dom/svg/crashtests/466576-1.xhtml')
| -rw-r--r-- | dom/svg/crashtests/466576-1.xhtml | 22 |
1 files changed, 22 insertions, 0 deletions
diff --git a/dom/svg/crashtests/466576-1.xhtml b/dom/svg/crashtests/466576-1.xhtml new file mode 100644 index 000000000..a27d42f57 --- /dev/null +++ b/dom/svg/crashtests/466576-1.xhtml @@ -0,0 +1,22 @@ +<html xmlns="http://www.w3.org/1999/xhtml"> +<head> +<script type="text/javascript"> + +function boom() +{ + try { + document.getElementById("y").gradientTransform.baseVal.appendItem(function(){}); + } catch(e) { } + + document.documentElement.innerHTML; +} + +</script> +</head> + +<body onload="boom();"> + +<linearGradient id="y" xmlns="http://www.w3.org/2000/svg" /> + +</body> +</html> |