editor/libeditor/crashtests/580151-1.xhtml

   1 <!DOCTYPE html>
   2 <html>
   3 <head>
   4 <script>
   5
   6 var t;
   7
   8 function boom()
   9 {
  10   var b = document.createElementNS("http://www.w3.org/1999/xhtml", "body");
  11   t = document.createElementNS("http://www.w3.org/1999/xhtml", "textarea");
  12   b.appendChild(t);
  13   document.removeChild(document.documentElement)
  14   document.appendChild(b)
  15   document.removeChild(document.documentElement)
  16   var ns = document.createElementNS("http://www.w3.org/1999/xhtml", "script");
  17   var nt = document.createTextNode("t.appendChild(document.createTextNode(' '));");
  18   ns.appendChild(nt);
  19   b.appendChild(ns);
  20   document.appendChild(b);
  21 }
  22
  23 </script>
  24 </head>
  25 <body onload="boom();"></body>
  26 </html>