blob: 5a84855e4206302cd33606a4c50bb5f0300577ef [file] [log] [blame]
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML//EN">
<html>
<head>
<script>
function removeAreaElement() {
document.getElementById("test").innerHTML=1
}
function queryTitleOnDecendants(accessibilityObject) {
accessibilityObject.title
var count = accessibilityObject.childrenCount;
for (var i = 0; i < count; ++i)
queryTitleOnDecendants(accessibilityObject.childAtIndex(i));
}
</script>
<script src="../resources/js-test-pre.js"></script>
</head>
<body>
<img usemap="#map">
<map name="map" id="test"><area href="javascript:document.getElementById('result').innerHTML='area clicked'" /></map>
<p id="description"></p>
<div id="console"></div>
<script>
description("Requesting the title of an AccessibilityImageMapLink can cause a crash when the map's area element has been removed.");
if (window.accessibilityController) {
// First build up full accessibility tree.
document.body.focus();
queryTitleOnDecendants(accessibilityController.focusedElement);
removeAreaElement()
// Now call request the title for each accessibility object.
document.body.focus();
queryTitleOnDecendants(accessibilityController.focusedElement);
}
</script>
<script src="../resources/js-test-post.js"></script>
</body>
</html>