| Torne (Richard Coles) | 5c87bf8 | 2012-11-14 11:46:17 +0000 | [diff] [blame] | 1 | <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN" |
| 2 | "http://www.w3.org/TR/html4/strict.dtd"> |
| 3 | <html lang="en"> |
| 4 | <head> |
| 5 | <script> |
| 6 | function init () { |
| 7 | document.getElementById("test").focus(); |
| 8 | } |
| 9 | |
| 10 | function foo () { |
| 11 | document.open(); |
| 12 | document.write('Test has passed.'); |
| 13 | document.close(); |
| 14 | } |
| 15 | </script> |
| 16 | </head> |
| 17 | <body onload="init();"> |
| 18 | <p><b>BUG ID:</b> <a href="rdar://problem/4181058">4181058</a> 8C45: Safari repro crash with document.write (WebCore::Node::dispatchEvent)</p> |
| 19 | |
| 20 | <p id="test" style="background-color:skyblue; padding:3px;"><b>STEPS TO TEST:</b> |
| 21 | <ul> |
| 22 | <li> Press the Tab key. This will remove focus from the text field, and should call document.write without crashing. |
| 23 | </ul> |
| 24 | </p> |
| 25 | |
| 26 | <p id="success" style="background-color:palegreen; padding:3px;"><b>TEST PASS:</b> |
| 27 | You should see text that says "Test has passed". |
| 28 | </p> |
| 29 | |
| 30 | <p id="failure" style="background-color:#FF3300; padding:3px;"><b>TEST FAIL:</b> |
| 31 | If the test fails, the browser will crash. |
| 32 | </p> |
| 33 | |
| 34 | <input type="text" id="test" onblur="foo();" /> |
| 35 | |
| 36 | </body> |
| 37 | </html> |