diff options
Diffstat (limited to '')
| -rw-r--r-- | dom/base/crashtests/439206-1.html | 19 |
1 files changed, 19 insertions, 0 deletions
diff --git a/dom/base/crashtests/439206-1.html b/dom/base/crashtests/439206-1.html new file mode 100644 index 0000000000..688ebe44d5 --- /dev/null +++ b/dom/base/crashtests/439206-1.html @@ -0,0 +1,19 @@ +<!DOCTYPE html> +<html> +<head> +<script type="text/javascript"> + +function boom() +{ + var s = document.createElement("STYLE"); + var t = document.createTextNode("\uDB00x"); // a high surrogate followed by 'x' + document.documentElement.appendChild(s); + s.appendChild(t); +} + +</script> +</head> + +<body onload="boom();"> +</body> +</html> |