summaryrefslogtreecommitdiffstats
path: root/layout/base/crashtests/580129-1.html
blob: 625dd8086bbfc435a78eb2533cb3b6531d267c91 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
<html>
<head>
<script>

function boom()
{
  var a = document.documentElement;
  var b = document.createElementNS("http://www.w3.org/1999/xhtml", "body");
  b.setAttributeNS(null, "style", "column-width: 20em;");
  a.innerHTML = "<frameset>";
  b.innerHTML = "<dd><marquee>x";
  document.removeChild(a);
  document.appendChild(b);
}

</script>
</head>
<body onload="boom();"></body>
</html>