dom/base/crashtests/1158412.html

   1 <!DOCTYPE html>
   2 <html>
   3 <head>
   4 <meta charset="UTF-8">
   5 <script>
   6
   7 function boom()
   8 {
   9     document.styleSheetSets.expando = null;
  10     var otherDoc = document.implementation.createDocument("", "", null);
  11     var otherSpan = otherDoc.createElementNS("http://www.w3.org/1999/xhtml", "span");
  12
  13     var img = document.createElementNS("http://www.w3.org/1999/xhtml", "img");
  14     img.srcset = "data:,a 1w, data:,b 1w";
  15     img.sizes = "1px";
  16     otherSpan.appendChild(img);
  17 }
  18
  19 </script>
  20 </head>
  21 <body onload="boom();"></body>
  22 </html>