summaryrefslogtreecommitdiff
path: root/dom/html/crashtests/515829-2.html
blob: 6de6d5986c4e3d2df83c04d18faa27467483621d (plain)
1
2
3
4
5
6
7
<!DOCTYPE html>
<html>
<head></head>
<body onload="document.getElementById('x').innerHTML = '<button></button>';">
<form><div id="x"><button></button></div><button></button><input type="image"></form>
</body>
</html>