gecko-dev/dom/base/crashtests/693811-3.html

5 строки
91 B
HTML

<!DOCTYPE html>
<script>
document.createElement("p").constructor = function(){};
</script>