bug_502091_iframe.html (367B)
1 <html> 2 <head> 3 <title>Crash [@ nsContentSink::ProcessHeaderData] with meta in innerHTML</title> 4 </head> 5 <body> 6 <div id="testdiv"> 7 testdiv 8 </div> 9 <script> 10 var x = document.createElement("div"); 11 x.innerHTML = '<meta http-equiv="Content-Type" content="text/html;"></meta>'; 12 document.getElementById("testdiv").appendChild(x); 13 </script> 14 some text here 15 </body> 16 </html>