summaryrefslogtreecommitdiffstats
path: root/parser/htmlparser/tests/crashtests/563514-1.html
diff options
context:
space:
mode:
Diffstat (limited to 'parser/htmlparser/tests/crashtests/563514-1.html')
-rw-r--r--parser/htmlparser/tests/crashtests/563514-1.html10
1 files changed, 10 insertions, 0 deletions
diff --git a/parser/htmlparser/tests/crashtests/563514-1.html b/parser/htmlparser/tests/crashtests/563514-1.html
new file mode 100644
index 0000000000..b96ce14661
--- /dev/null
+++ b/parser/htmlparser/tests/crashtests/563514-1.html
@@ -0,0 +1,10 @@
+<!DOCTYPE html>
+<head>
+<script>
+function boom()
+{
+ document.createElement("span").innerHTML = "<body a='b'>";
+}
+</script>
+</head>
+<body onload="boom();"></body> \ No newline at end of file