This test must not crash.

<mark> <script>f1();</script> <xmp>