blob: f67a9d40d84be561f1b95877449ea0a642965dac (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
|
<html>
<head>
<script type="text/javascript">
function boom()
{
document.documentElement.style.MozBinding = "url('#none')";
document.body.offsetHeight;
document.removeChild(document.documentElement)
document.appendChild(document.createElement("div"));
}
</script>
</head>
<body onload="boom();"></body>
</html>
|
