content/events/crashtests/422009-1.xhtml

   1 <html xmlns="http://www.w3.org/1999/xhtml">
   2 <head>
   3
   4 <bindings xmlns="http://www.mozilla.org/xbl">
   5   <binding id="g">
   6     <implementation>
   7       <constructor>
   8         throw 3;
   9       </constructor>
  10     </implementation>
  11   </binding>
  12 </bindings>
  13
  14 <script type="text/javascript">
  15
  16 function boom()
  17 {
  18   var HTML_NS = "http://www.w3.org/1999/xhtml";
  19   var span = document.createElementNS(HTML_NS, 'span');
  20   span.style.MozBinding = "url(#g)";
  21   document.removeChild(document.documentElement)
  22   var w = document.createElementNS(HTML_NS, 'body');
  23   w.setAttribute('onload', "/");
  24   document.appendChild(span);
  25 }
  26
  27 </script>
  28 </head>
  29
  30 <body onload="boom();"></body>
  31 </html>