blob: ce15fc6363242d3829d5e1430d1ba8583ca86bae (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
|
<!DOCTYPE html>
<html>
<head>
<script>
function boom()
{
document.getElementById("a").focus();
document.execCommand("inserthtml", false, "<svg><td>");
document.removeChild(document.documentElement);
}
</script>
</head>
<body onload="boom();"><div id="a" contenteditable="true"></div></body>
</html>
|
