mirror of
https://github.com/classilla/tenfourfox.git
synced 2024-08-14 10:29:31 +00:00
32 lines
662 B
HTML
32 lines
662 B
HTML
|
<html xmlns="http://www.w3.org/1999/xhtml">
|
||
|
|
<head>
|
||
|
|
|
||
|
|
<bindings xmlns="http://www.mozilla.org/xbl">
|
||
|
|
<binding id="g">
|
||
|
|
<implementation>
|
||
|
|
<constructor>
|
||
|
|
throw 3;
|
||
|
|
</constructor>
|
||
|
|
</implementation>
|
||
|
|
</binding>
|
||
|
|
</bindings>
|
||
|
|
|
||
|
|
<script type="text/javascript">
|
||
|
|
|
||
|
|
function boom()
|
||
|
|
{
|
||
|
|
var HTML_NS = "http://www.w3.org/1999/xhtml";
|
||
|
|
var span = document.createElementNS(HTML_NS, 'span');
|
||
|
|
span.style.MozBinding = "url(#g)";
|
||
|
|
document.removeChild(document.documentElement)
|
||
|
|
var w = document.createElementNS(HTML_NS, 'body');
|
||
|
|
w.setAttribute('onload', "/");
|
||
|
|
document.appendChild(span);
|
||
|
|
}
|
||
|
|
|
||
|
|
</script>
|
||
|
|
</head>
|
||
|
|
|
||
|
|
<body onload="boom();"></body>
|
||
|
|
</html>
|