1 <url id=test1
></url>><listing id=test2
>
3 <root id=test3
><bdi dir=ltr id=test4
><script>
4 var docElement
= document
.body
? document
.body
: document
.documentElement
;
6 try { test5
= document
.createElementNS("http://www.w3.org/2000/svg", "symbol"); } catch(e
) {}
7 setTimeout("CFcrash()", 231);
9 document
.addEventListener("DOMContentLoaded", initCF
);
11 try { if (test1
!= docElement
) { test1
.remove(); test1
= test4
; }} catch(e
) {}
12 try { if (test1
!= docElement
) { test1
.remove(); }} catch(e
) {}
13 try { test4
.appendChild(test3
); } catch(e
) {}
14 try { test3
.appendChild(test2
); } catch(e
) {}
15 try { test4
.setAttribute("dir", "invalid"); } catch(e
) {}
16 setTimeout('try { test5.appendChild(test4); } catch(e) {}', 343);
17 try { test2
.innerHTML
= "W?bj; ![#`A`#Mn$1r+cn OwS56 =@jQZU Ua\x7f.[d 4g07!6pZzjN ~4P 1C0_# E#Ak/OYXQ46F%7)^KI m-9:`u2^yx R ,yv04!`L)x3V A5K*&NK!Z qnXt!`I 4i|i=eE?VI=^&lx:F hI2=t+AH)A` | 3wWxDv0eU"; } catch(e
) {}