summaryrefslogtreecommitdiff
path: root/parser/htmlparser/tests/crashtests/468538-1.xhtml
diff options
context:
space:
mode:
Diffstat (limited to 'parser/htmlparser/tests/crashtests/468538-1.xhtml')
-rw-r--r--parser/htmlparser/tests/crashtests/468538-1.xhtml15
1 files changed, 15 insertions, 0 deletions
diff --git a/parser/htmlparser/tests/crashtests/468538-1.xhtml b/parser/htmlparser/tests/crashtests/468538-1.xhtml
new file mode 100644
index 0000000000..576b333c19
--- /dev/null
+++ b/parser/htmlparser/tests/crashtests/468538-1.xhtml
@@ -0,0 +1,15 @@
+<html xmlns="http://www.w3.org/1999/xhtml" xmlns:xul="http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul">
+<head>
+<script type="text/javascript">
+
+function boom()
+{
+ var v = document.getElementById("v");
+ document.body.removeChild(document.body.firstChild);
+ v.innerHTML = "f";
+}
+
+</script>
+</head>
+<body onload="boom();"><xul:box><div id="v"/></xul:box></body>
+</html>