<script>
function jsfuzzer() {
try { a.getEndPositionOfChar(0); } catch(e) { }
}
</script>
<body onload=jsfuzzer()>
<svg>
<switch>
<text id="a">
</text>
<feTurbulence
<!-- a -->