601284-1.html (487B)
1 <!DOCTYPE html> 2 <html> 3 <head> 4 <script> 5 6 function boom() 7 { 8 var frameRoot = document.getElementById("f").contentDocument.documentElement; 9 var marquee = frameRoot.getElementsByTagName("marquee")[0]; 10 marquee.__proto__ = []; 11 frameRoot.appendChild(marquee); 12 } 13 14 </script> 15 </head> 16 17 <body onload="boom();"> 18 19 <iframe id="f" src="data:application/xhtml+xml,<html xmlns='http://www.w3.org/1999/xhtml'><body><marquee style='display: none'></marquee></body></html>"></iframe> 20 21 </body> 22 </html>