summaryrefslogtreecommitdiffstats
path: root/dom/xml/crashtests/994740-1.xhtml
blob: 4d71cef27f6cc65777722c7aa6a341d472aa73b0 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<script>
<![CDATA[

function boom()
{
    document.createElement("head").innerHTML = "<";
}

]]>
</script></head>

<body onload="boom();"></body>
</html>