dom/svg/crashtests/1035248-1.svg

   1 <svg xmlns="http://www.w3.org/2000/svg">
   2 <script>
   3
   4 function boom()
   5 {
   6     var outer = document.createElementNS("http://www.w3.org/1999/xhtml", "div");
   7     var inner = document.createElementNS("http://www.w3.org/1999/xhtml", "div");
   8     inner.setAttributeNS(null, "style", "display: table-row-group;");
   9     outer.appendChild(inner);
  10
  11     document.removeChild(document.documentElement);
  12     document.appendChild(outer);
  13 }
  14
  15 window.addEventListener("load", boom, false);
  16
  17 </script>
  18 </svg>