dom/base/crashtests/450383-1.html


1
2
3
4
5
6
7
8
9

<html>
<BODY></BODY>
<SCRIPT>
    document.addEventListener("DOMCharacterDataModified",function(){
        document.body.innerHTML=""; // change this to see memory corruption
    },true);
    document.body.innerHTML="<optGroup</form<textArea";
</SCRIPT>
</html>