dom/events/crashtests/1072137-1.html

   1 <!DOCTYPE html>
   2 <html>
   3 <script>
   4
   5 function boom()
   6 {
   7   var textareaRoot = document.createElement("textarea");
   8   document.removeChild(document.documentElement);
   9   document.appendChild(textareaRoot);
  10   var input = document.createElement("input");
  11   textareaRoot.appendChild(input);
  12   input.select();
  13 }
  14
  15 </script>
  16 </head>
  17 <body onload="boom();"></body>
  18 </html>