layout/svg/crashtests/364688-1.svg

   1 <svg xmlns="http://www.w3.org/2000/svg"
   2      xmlns:html="http://www.w3.org/1999/xhtml"
   3      onload="setTimeout(boom, 30);"
   4      class="reftest-wait">
   5
   6 <script>
   7 function boom()
   8 {
   9   document.getElementById("sss").removeAttribute('value');
  10
  11   document.documentElement.removeAttribute("class");
  12 }
  13 </script>
  14
  15
  16 <foreignObject width="500" height="500" y="300">
  17
  18 <div xmlns="http://www.w3.org/1999/xhtml">
  19
  20 <table border="1">
  21  <tr>
  22   <td>Foo</td>
  23  </tr>
  24  <tr>
  25   <td><input type="text" value="Baz" id="sss" /></td>
  26  </tr>
  27 </table>
  28
  29 </div>
  30
  31 </foreignObject>
  32
  33
  34 </svg>