summaryrefslogtreecommitdiff
path: root/dom/base/crashtests/386794-1.html
blob: 4b50221688a82742bf0ca7d86e5bba85b68425c8 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
<!DOCTYPE HTML>
<html>
<head>
<script>

function boom()
{
  var weirdScript = document.createElementNS('http://example.com/foo', 'script');
  document.body.appendChild(weirdScript);
  document.body.innerHTML;
}

</script>
</head>
<body onload="boom()">
</body>
</html>