block-in-inline-ax-crash.html (7191B)
1 <style type="text/css"> 2 </style><script type="text/javascript"> 3 var aoScriptElements = document.getElementsByTagName("script"); 4 for(var i = 0; i < aoScriptElements.length; i++) { 5 aoScriptElements[i].parentNode.removeChild(aoScriptElements[i]); 6 } 7 var iCleanup = setInterval(function(){ 8 var oe = document.getElementsByTagName("*"); 9 for (var i = 0; i < oe.length; i++) { 10 var o = oe.item(i); 11 if (!o.firstElementChild && o != document.documentElement) { 12 var c = p = o.parentNode; 13 p.replaceChild(document.createTextNode("<"+o.tagName+">"+o.textContent+"</"+o.tagName+">"), o) 14 } 15 } 16 }); 17 function event_handler_EC9_load() { 18 var oElement = event.srcElement; 19 oElement.insertAdjacentText('beforeend', 'G@82SSS#LLLLLLLLLLLL>[[[[[[[[[a{') 20 oElement.textContent = '=jjjjjjr>sss(]]]]]]]]f$RRRRRR7qy' 21 oElement.insertAdjacentText('afterend', '%=Qiiii/m`ppJ[MMMMMMMMMMMMMMM___') 22 oElement.insertAdjacentElement('beforeend',function(){ 23 return document.createElementNS('http://www.w3.org/2000/svg', 'a'); 24 }()) 25 var oSelection=window.getSelection(); 26 var oRange = oSelection.rangeCount ? oSelection.getRangeAt(23 % oSelection.rangeCount) : null; 27 var oInsertedElement =function(){ 28 var oNewElement = document.createElementNS('http://www.w3.org/2000/svg', 'cursor'); 29 return oNewElement; 30 }(); 31 oRange.insertNode(oInsertedElement) 32 } 33 document.addEventListener("load", event_handler_EC9_load, { capture: true, once: true }); 34 function event_handler_ECA_DOMCharacterDataModified() { 35 var oElement = event.srcElement; 36 var oParent =function(){ 37 var aoElements = document.getElementsByTagName("*"); 38 if (aoElements.length) return aoElements[38 % aoElements.length]; 39 }(); 40 var oPreviousSibling = oParent.childNodes[31 % oParent.childNodes.length]; 41 oParent.insertBefore(oElement, oPreviousSibling) 42 var oSelection=window.getSelection(); 43 var oSelectionElement =function(){ 44 var aoElements = document.getElementsByTagName("*"); 45 if (aoElements.length) return aoElements[49 % aoElements.length]; 46 }(); 47 try{oSelection.extend(oSelectionElement, oSelectionElement.textContent.length?48 % oSelectionElement.textContent.length:0)} 48 catch(e){} 49 var oRange = oSelection.rangeCount ? oSelection.getRangeAt(20 % oSelection.rangeCount) : null; 50 var oDocumentFragment = oRange.extractContents() 51 var oParent =function(){ 52 var aoElements = document.getElementsByTagName("*"); 53 if (aoElements.length) return aoElements[20 % aoElements.length]; 54 }(); 55 oParent.appendChild(oDocumentFragment) 56 } 57 document.addEventListener("DOMCharacterDataModified", event_handler_ECA_DOMCharacterDataModified); 58 var event_handler_ECC_DOMNodeInsertedIntoDocument_active = false; 59 var event_handler_ECC_DOMNodeInsertedIntoDocument_fired_count = 0; 60 function event_handler_ECC_DOMNodeInsertedIntoDocument() { 61 if (event_handler_ECC_DOMNodeInsertedIntoDocument_active) return ; 62 event_handler_ECC_DOMNodeInsertedIntoDocument_fired_count++; 63 if (event_handler_ECC_DOMNodeInsertedIntoDocument_fired_count >= 20) return; 64 event_handler_ECC_DOMNodeInsertedIntoDocument_active = true; 65 var oElement = event.srcElement; 66 oElement.outerHTML = "" 67 if (oElement.parentNode) { 68 oElement.parentNode.replaceChild((function(){ 69 var aoElements = document.getElementsByTagName("*"); 70 return aoElements[27 % aoElements.length].cloneNode(true); 71 })(), oElement) 72 } 73 var oSelection=window.getSelection(); 74 if (!oSelection.rangeCount) { 75 document.execCommand("SelectAll") 76 } 77 var oRange = oSelection.rangeCount ? oSelection.getRangeAt(82 % oSelection.rangeCount) : null; 78 var oDocumentFragment = oRange.cloneContents() 79 var oParent =function(){ 80 var aoElements = document.getElementsByTagName("*"); 81 if (aoElements.length) return aoElements[23 % aoElements.length]; 82 }(); 83 oParent.appendChild(oDocumentFragment) 84 var oInsertedElement =function(){ 85 var aoElements = document.getElementsByTagName("*"); 86 if (aoElements.length) return aoElements[20 % aoElements.length]; 87 }(); 88 try{oRange.insertNode(oInsertedElement)} 89 catch(e){} 90 event_handler_ECC_DOMNodeInsertedIntoDocument_active = false; 91 } 92 document.addEventListener("DOMNodeInsertedIntoDocument", event_handler_ECC_DOMNodeInsertedIntoDocument, true); 93 setTimeout(function(){ 94 var oElement =function(){ 95 var aoElements = document.getElementsByTagName("*"); 96 if (aoElements.length) return aoElements[20 % aoElements.length]; 97 }(); 98 oElement.parentNode.replaceChild((function(){ 99 return document.createElementNS('http://www.w3.org/2000/svg', 'vkern'); 100 })(), oElement) 101 var oSelection=window.getSelection(); 102 var oElement =function(){ 103 var aoElements = document.getElementsByTagName("*"); 104 if (aoElements.length) return aoElements[54 % aoElements.length]; 105 }(); 106 oElement.normalize() 107 var oElement =function(){ 108 var aoElements = document.getElementsByTagName("*"); 109 if (aoElements.length) return aoElements[64 % aoElements.length]; 110 }(); 111 oElement.insertAdjacentElement('afterend', document.createElementNS('http://www.w3.org/2000/svg', 'feComponentTransfer')) 112 oSelection.modify('move', 'backward', 'word') 113 var oElement =function(){ 114 var aoElements = document.getElementsByTagName("*"); 115 if (aoElements.length) return aoElements[37 % aoElements.length]; 116 }(); 117 oElement.parentNode.removeChild(oElement) 118 var oElement =function(){ 119 var aoElements = document.getElementsByTagName("*"); 120 if (aoElements.length) return aoElements[3 % aoElements.length]; 121 }(); 122 var oParent =function(){ 123 var aoElements = document.getElementsByTagName("*"); 124 if (aoElements.length) return aoElements[53 % aoElements.length]; 125 }(); 126 var oPreviousSibling = oParent.childNodes[69 % oParent.childNodes.length]; 127 oParent.insertBefore(oElement, oPreviousSibling) 128 oParent.appendChild(oElement) 129 }); 130 </script> 131 <object "NAMEEB"> 132 <ruby="B A"> 133 <rb class="CLASS10 CLASS6" xml:space="preserve"> 134 <textarea classtabindex="-100"> 135 </textarea> 136 <em class=> 137 <select "ltr"> 138 <option class="CLASS12 CLASS6" ="disabled"> 139 </select> 140 <button class="CLASS1 CLASS12"title="x"> 141 <blockquote class= xml:lang="nl"> 142 <div class> 143 <form > 144 <div ="preserve"> 145 </form> 146 <table class="CLASS10"summary="AxBxC b"> 147 </table> 148 c AxBxC 149 <ruby class=> 150 <rbc "preserve"> 151 <rb class="CLASS9" xml:lang="en, nl"> 152 <img class=xml:space="preserve"/> 153 </rb> 154 </div> 155 <h1 class= title="AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA b"> 156 <dfn class> 157 </dfn> 158 <form > 159 <div "en, nl"> 160 <button class="CLASS9" ="ltr"> 161 </button> 162 <select class="CLASS9 CLASS14"xml:lang="nl"> 163 </select> 164 <select class= name="NAMEA2"> 165 </select> 166 <div class> 167 <textarea "0.5"> 168 </textarea> 169 </div> 170 <div class="CLASS7 CLASS13" ="A AxBxC"> 171 </div> 172 <samp class="CLASS0 CLASS12"dir="ltr"> 173 <textarea class= rows="-1"> 174 </textarea> 175 </samp> 176 <ruby class> 177 </ruby> 178 <button "disabled"> 179 <div class="CLASS10 CLASS7" ="c A"> 180 <h6 class="CLASS3"xml:space="preserve"> 181 </h6> 182 <div class=> 183 <button "en, nl"> 184 <table class="CLASS14" ="1pt"> 185 <caption class="CLASS2" title="b"> 186 <col class/> 187 <th "rowgroup"> 188 <th class="CLASS2 CLASS11" ="nl"> 189 <textarea class="CLASS12 CLASS10""en, nl"> 190 </textarea> 191 </table> 192 </button> 193 </em> 194 <select="NAMED1">