395651-1.html 708 B

1234567891011121314151617181920212223242526272829303132
  1. <html>
  2. <head>
  3. <script>
  4. function X() { dump("X\n"); }
  5. function Y() { dump("Y\n"); }
  6. function boom()
  7. {
  8. dump("Start9\n");
  9. var div = document.getElementById("v");
  10. var textNode = document.createTextNode(String.fromCharCode(0xDAAF)); // high surrogate
  11. div.appendChild(textNode);
  12. document.addEventListener("DOMCharacterDataModified", X, true);
  13. textNode.data += 'B';
  14. document.removeEventListener("DOMCharacterDataModified", X, true);
  15. document.addEventListener("DOMAttrModified", Y, true);
  16. textNode.data += String.fromCharCode(0xDF53); // low surrogate
  17. document.removeEventListener("DOMAttrModified", Y, true);
  18. }
  19. </script>
  20. </head>
  21. <body onload="boom();"><div id="v"></div></body>
  22. </html>