gecko-dev/dom/html/crashtests/590387.html

зеркало из https://github.com/mozilla/gecko-dev.git
<!DOCTYPE html>
<html>
<head>
<script>
document.createElement("div").innerHTML = "<output form=x>";
</script>
</head>
</html>
Bug 590387 - Crash [@ nsGenericHTMLFormElement::UpdateFormOwner] when attaching an element with @form set to an element which is not in a document. r=sicking a2.0=blocking --HG-- extra : rebase_source : 9f2a36b9a622c9ef1a2e3501ba45a297b8451d9e 2010-08-26 00:45:43 +04:00			`<!DOCTYPE html>`
			`<html>`
			`<head>`
			`<script>`
			`document.createElement("div").innerHTML = "<output form=x>";`
			`</script>`
			`</head>`
			`</html>`