summaryrefslogtreecommitdiffstats
path: root/layout/style/crashtests/573127-1.html
blob: 72fbaf63efd7d51e2e48d1d2ace222ed100c75c1 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
<!DOCTYPE html>
<html>
<head>
<script>

function boom()
{
  var mspace = document.createElementNS("http://www.w3.org/1998/Math/MathML", "mspace");
  var emptyset = document.createElementNS("http://www.w3.org/1998/Math/MathML", "emptyset");
  emptyset.setAttributeNS(null, "mathvariant", "3");
  mspace.appendChild(emptyset);
  document.body.appendChild(mspace);
  emptyset.removeAttribute('mathvariant');
}

</script>
</head>

<body onload="boom()"></body>
</html>