layout/base/crashtests/414058-1.html


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17

<html>
<head>
<script type="text/javascript">

function boom()
{
  document.documentElement.style.MozBinding = "url('#none')";
  document.body.offsetHeight;
  document.removeChild(document.documentElement) 
  document.appendChild(document.createElement("div"));
}

</script>
</head>

<body onload="boom();"></body>
</html>