<html xmlns="http://www.w3.org/1999/xhtml"> <head> <script> <![CDATA[ function boom() { document.createElement("head").innerHTML = "<"; } ]]> </script></head> <body onload="boom();"></body> </html>