dom/xml/crashtests/994740-1.xhtml


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15

<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<script>
<![CDATA[

function boom()
{
    document.createElement("head").innerHTML = "<";
}

]]>
</script></head>

<body onload="boom();"></body>
</html>