blob: 076d3ed66208844093c0c7d870828bbfa8b10ecb (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
|
<html>
<head>
<title>Crash [@ nsContentSink::ProcessHeaderData] with meta in innerHTML</title>
</head>
<body>
<div id="testdiv">
testdiv
</div>
<script>
var x = document.createElement("div");
x.innerHTML = '<meta http-equiv="Content-Type" content="text/html;"></meta>';
document.getElementById("testdiv").appendChild(x);
</script>
some text here
</body>
</html>
|
