dom/events/crashtests/422009-1.xhtml
author B2G Bumper Bot <release+b2gbumper@mozilla.com>
Fri, 06 Jun 2014 22:01:28 -0700
changeset 207594 c34df4be418e0c7e4289a287de8c4d7efb8ec3b8
parent 180453 35dddd51e275f6a296a79bfaea84db81b3c6ffb2
permissions -rw-r--r--
Bumping manifests a=b2g-bump

<html xmlns="http://www.w3.org/1999/xhtml">
<head>

<bindings xmlns="http://www.mozilla.org/xbl">
  <binding id="g">
    <implementation>
      <constructor>
        throw 3;
      </constructor>
    </implementation>
  </binding>
</bindings>

<script type="text/javascript">

function boom()
{
  var HTML_NS = "http://www.w3.org/1999/xhtml";
  var span = document.createElementNS(HTML_NS, 'span');
  span.style.MozBinding = "url(#g)";
  document.removeChild(document.documentElement)
  var w = document.createElementNS(HTML_NS, 'body');
  w.setAttribute('onload', "/");
  document.appendChild(span);
}

</script>
</head>

<body onload="boom();"></body>
</html>