equal
deleted
inserted
replaced
|
1 <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN" |
|
2 "http://www.w3.org/TR/html4/strict.dtd"> |
|
3 <html lang="en"> |
|
4 <head> |
|
5 <script> |
|
6 function removeDiv() |
|
7 { |
|
8 var parent = document.getElementById("parent"); |
|
9 var child = document.getElementById("child"); |
|
10 parent.removeChild(child); |
|
11 } |
|
12 </script> |
|
13 </head> |
|
14 <body> |
|
15 <p><b>BUG ID:</b> <a href="rdar://problem/4621649">4621649</a> repro crash: Upload link causes crash on pages.google.com in Frame::nodeForWidget</p> |
|
16 |
|
17 <p id="test" style="background-color:skyblue; padding:3px;"><b>STEPS TO TEST:</b> |
|
18 <ol> |
|
19 <li> To test this bug, just choose any file |
|
20 </ol> |
|
21 </p> |
|
22 |
|
23 <p id="success" style="background-color:palegreen; padding:3px;"><b>TEST PASS:</b> |
|
24 Should see the file chooser disappear and the word "Success" will appear |
|
25 </p> |
|
26 |
|
27 <p id="failure" style="background-color:#FF3300; padding:3px;"><b>TEST FAIL:</b> |
|
28 Safari will crash in WebCore::Frame::nodeForWidget. |
|
29 </p> |
|
30 |
|
31 <div id="parent"> |
|
32 <div id="child"> |
|
33 <form> |
|
34 <input id="theFile" type="file" onchange="removeDiv();"> |
|
35 </form> |
|
36 </div> |
|
37 </div> |
|
38 |
|
39 |
|
40 |
|
41 </body> |
|
42 </html> |