1.设置scrollbar-base-color,css里给table做了定位,再通过js改变其定位IE6就崩溃了。
关键代码:
<style type="text/css"> html, body { scrollbar-base-color: #330066; } .crash { position:absolute; left:200px; top:200px; width:200px; } </style> <script type="text/javascript"> function galgenfrist() { window.setTimeout('crashIE();',1000); } function crashIE() { var moveNode = document.getElementById("move"); if(moveNode) { moveNode.style.top = "100px"; moveNode.style.left = "200px"; } } </script> <body οnlοad="galgenfrist();"> <div id="move" class="crash"> <table> <tbody> <tr> <td> <textarea></textarea> </td> </tr> </tbody> </table> </div> </body> |
2.document.write
<script>for (x in document.write) { document.write(x);}</script> |
在FF和Chrome中,都会打印出“prototype”字符,在IE6中立即崩溃。
3.在CSS中使用通配符*,在HTML的table标签中直接放置内容(而不是<tr>标签之类)
<style>*{position:relative}</style><table>aaabbbccc</table> |
4.CSS中出现@+任意字符+/* 立即崩溃
5.οnlοad="window()"
<body οnlοad="window()"></body>