<
head dir=auto id=test1><
body id=test2><
div" id=test3 itemtype=http://example.com/bar style="speak-numeral:>
">
><
script>
document.addEventListener(
"DOMContentLoaded", CFcrash);
function CFcrash() {
test1.appendChild(test4);
test1.setAttribute(
"dir",
"foopy");
test1.appendChild(c);
test4.textContent = test2.outerHTML;
c.appendChild(test3);
}</
script>>