This test must not crash.

foo
<mark>
<script>f1();</script>
<xmp>
foo