gecko-dev/dom/base/crashtests/675621-1.html

8 строки
165 B
HTML

<!DOCTYPE html>
<body>
<script>
document.addEventListener("DOMSubtreeModified", function() {});
document.body.insertAdjacentHTML("afterbegin", "<p>foo");
</script>