gecko-dev/js/xpconnect/crashtests/382133-1.html

<script>
(function(){}).apply.ee = <foo/>;
</script>