gecko/gfx/thebes/crashtests/487724-1.html
2010-01-10 19:50:41 -08:00

24 lines
531 B
HTML

<!DOCTYPE html>
<html>
<head>
<script type="text/javascript">
function boom()
{
var w = document.getElementById("w");
var q = document.getElementById("q");
var e = document.createTextNode("");
document.documentElement.appendChild(document.body);
w.appendChild(e);
document.documentElement.offsetHeight;
w.removeChild(q);
document.documentElement.offsetHeight;
e.data += " x ";
}
</script>
</head>
<body onload="boom();"><span id="w">s&#x202E;<span id="q"></span><div></div><span>a</span></span></body>
</html>