js/xpconnect/crashtests/468552-1.html

   1 <html xmlns="http://www.w3.org/1999/xhtml">
   2 <head>
   3 <script type="text/javascript">
   4
   5 function boom()
   6 {
   7   var dp = document.__proto__;
   8   dp.__proto__ = new XPCNativeWrapper(new XMLSerializer);
   9   try {
  10     dp.replaceChild();
  11   } catch(e) { }
  12 }
  13
  14 </script>
  15 </head>
  16
  17 <body onload="boom();"></body>
  18 </html>