Source code

Revision control

Copy as Markdown

Other Tools

Test Info:

<!DOCTYPE html>
<style>
body, fieldset { contain: strict; }
</style>
<script>
function crash() {
document.body.offsetTop;
document.body.appendChild(document.createElement("fieldset"));
}
</script>
<body onload="crash()">