Source code
Revision control
Copy as Markdown
Other Tools
Test Info:
- Manifest: gfx/tests/crashtests/crashtests.list
<head>
<script>
var ff;
var jj;
function boom()
{
ff = document.createElement("font");
ff.setAttribute("size", "-2");
ff.appendChild(document.createTextNode("G"));
jj = document.getElementById("jj");
jj.appendChild(ff);
setTimeout(boom2, 30);
}
function boom2()
{
jj.removeChild(ff);
document.documentElement.removeAttribute("class");
}
</script>
</head>
<body onload="boom();" dir="rtl"><div id="jj">h </div></body>
</html>