Source code
Revision control
Copy as Markdown
Other Tools
Test Info:
- Manifest: dom/base/crashtests/crashtests.list
<head>
<script>
<![CDATA[
function boom()
{
var div = document.getElementById("div");
var embed = document.getElementById("embed");
embed.setAttribute("src", "javascript:'QQQQ'");
embed.removeAttribute("src");
document.body.appendChild(div);
document.documentElement.removeAttribute("class");
}
]]>
</script>
</head>
<body onload="setTimeout(boom, 30);">
<div id="div"><embed id="embed"/></div>
</body>
</html>