summaryrefslogtreecommitdiffstats
path: root/parser/htmlparser/tests/crashtests/650501-1.xhtml
blob: c701a0c76c40dee5c9e1a96385e3d36788338f60 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22

<html xmlns="http://www.w3.org/1999/xhtml"> 
<head> 
<script> 
<![CDATA[
 
function boom()
{
  var a = document.createElement("div");
  a.innerHTML = "<script>1;<\/script>";
 
  var b = document.createElement("div")
  try { b.innerHTML = "<"; } catch (invalidXML) { }
 
  document.documentElement.appendChild(a);
}
 
]]>
</script> 
</head> 
<body onload="boom();"></body> 
</html>