blob: 2a127357ed23b38ba23677a73e96f160b9110d3c (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
|
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<script type="text/javascript">
<![CDATA[
function boom()
{
var a = document.createElementNS("http://www.w3.org/1999/xhtml", "frameset");
var b = document.createElementNS("http://www.w3.org/1999/xhtml", "frameset");
var c = document.createElementNS("http://www.w3.org/1999/xhtml", "frameset");
var div = document.createElementNS("http://www.w3.org/1999/xhtml", "div");
a.appendChild(b);
document.documentElement.appendChild(a);
document.documentElement.offsetHeight;
b.appendChild(c);
document.documentElement.offsetHeight;
c.appendChild(div)
}
window.addEventListener("load", boom, false);
]]>
</script></head>
<body></body>
</html>
|
