summaryrefslogtreecommitdiffstats
path: root/layout/base/crashtests/1414100.html
blob: bb7ec35673cba223774abdafc947efba55da47a6 (plain)
1
2
3
4
5
6
7
8
9
<script>
function jsfuzzer() {
  var a = htmlvar00024.attachShadow({ mode: "open" });
  a.innerHTML = htmlvar00013.outerHTML;
}
</script>
<body onload=jsfuzzer()>
<div id="htmlvar00013">
<q id="htmlvar00024">