dom/base/crashtests/1460794.html

   1 <script>
   2 function go() {
   3   b.addEventListener("DOMAttrModified", eh2);
   4   e.setAttribute("lang", "en-us");
   5 }
   6 function eh1() {
   7   a.getSVGDocument().adoptNode(c);
   8 }
   9 function eh2() {
  10   d.addEventListener("DOMNodeRemoved", eh1);
  11   d.innerHTML = undefined;
  12 }
  13 </script>
  14 <body onload=go()>
  15 <iframe id="a"></iframe>
  16 <a id="c"/>
  17 <g id="d">
  18 <mask id="b"/>
  19 <font-face-format id="e">