gecko-dev/layout/base/crashtests/629908-1.html

зеркало из https://github.com/mozilla/gecko-dev.git
<body onload="die()">
  <script>
    function die() {
      document.body.offsetWidth;
      document.removeChild(document.documentElement);
      document.dir = "rtl";
    }
  </script>
</body>
Bug 629908. Don't blindly try to reconstruct the root element; we might not have one. r=dbaron, a=dbaron 2011-02-15 23:51:33 +03:00			`<body onload="die()">`
			`<script>`
			`function die() {`
			`document.body.offsetWidth;`
			`document.removeChild(document.documentElement);`
			`document.dir = "rtl";`
			`}`
			`</script>`
			`</body>`