| <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN" |
| "http://www.w3.org/TR/html4/strict.dtd"> |
| <html lang="en"> |
| <head> |
| <script> |
| function init () { |
| document.getElementById("test").focus(); |
| } |
| |
| function foo () { |
| document.open(); |
| document.write('Test has passed.'); |
| document.close(); |
| } |
| </script> |
| </head> |
| <body onload="init();"> |
| <p><b>BUG ID:</b> <a href="rdar://problem/4181058">4181058</a> 8C45: Safari repro crash with document.write (WebCore::Node::dispatchEvent)</p> |
| |
| <p id="test" style="background-color:skyblue; padding:3px;"><b>STEPS TO TEST:</b> |
| <ul> |
| <li> Press the Tab key. This will remove focus from the text field, and should call document.write without crashing. |
| </ul> |
| </p> |
| |
| <p id="success" style="background-color:palegreen; padding:3px;"><b>TEST PASS:</b> |
| You should see text that says "Test has passed". |
| </p> |
| |
| <p id="failure" style="background-color:#FF3300; padding:3px;"><b>TEST FAIL:</b> |
| If the test fails, the browser will crash. |
| </p> |
| |
| <input type="text" id="test" onblur="foo();" /> |
| |
| </body> |
| </html> |