29 lines
499 B
HTML
29 lines
499 B
HTML
<html xmlns="http://www.w3.org/1999/xhtml" class="reftest-wait">
|
|
<head>
|
|
|
|
<script>
|
|
<![CDATA[
|
|
|
|
function boom()
|
|
{
|
|
var div = document.getElementById("div");
|
|
var embed = document.getElementById("embed");
|
|
embed.setAttribute("src", "javascript:'QQQQ'");
|
|
embed.removeAttribute("src");
|
|
document.body.appendChild(div);
|
|
|
|
document.documentElement.removeAttribute("class");
|
|
}
|
|
|
|
]]>
|
|
</script>
|
|
|
|
</head>
|
|
|
|
<body onload="setTimeout(boom, 30);">
|
|
|
|
<div id="div"><embed id="embed"/></div>
|
|
|
|
</body>
|
|
</html>
|