dom/svg/crashtests/466576-1.xhtml

   1 <html xmlns="http://www.w3.org/1999/xhtml">
   2 <head>
   3 <script type="text/javascript">
   4
   5 function boom()
   6 {
   7   try {
   8     document.getElementById("y").gradientTransform.baseVal.appendItem(function(){});
   9   } catch(e) { }
  10
  11   document.documentElement.innerHTML;
  12 }
  13
  14 </script>
  15 </head>
  16
  17 <body onload="boom();">
  18
  19 <linearGradient id="y" xmlns="http://www.w3.org/2000/svg" />
  20
  21 </body>
  22 </html>