blob: 5752572a021a6bb84b1b3938a90f4a9a410d92d1 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
|
<!DOCTYPE html>
<script>
function boom()
{
document.documentElement.removeChild(document.body);
var newBody = document.createElementNS("http://www.w3.org/1999/xhtml", "body");
document.documentElement.appendChild(newBody);
newBody.contentEditable = "true";
document.execCommand("inserthtml", false, "<textarea>a</textarea>");
document.execCommand("insertimage", false, "1.jpg");
try { document.execCommand("forwardDelete", false, null); } catch(e) { }
document.execCommand("inserthtml", false, "x<span><\/span>y");
}
</script>
<body onload="boom();"></body>
|
