blob: e43e0748f88ba06090abe562d5a39d26c9903600 [file] [log] [blame]
mitz@apple.com660edfe2011-01-15 01:20:45 +00001<style>
2 div { padding: 10px; margin: 8px; }
3 embed { width: 50px; height: 50px; }
4 iframe { width: 50px; height: 50px; }
5</style>
6<script>
7 var callCount = 0;
8
9 function hideFirst()
10 {
11 if (++callCount != 2)
12 return;
13
14 var target = document.getElementById("target");
15 if (!target)
16 return;
17
18 target.parentNode.removeChild(target);
19 document.body.offsetTop;
20 }
21</script>
22<p>
23 Test that plug-ins cannot cause the NSView hierarchy to change beneath <tt>-[NSView _invalidateGStatesForTree]</tt>.
24</p>
25<p>
26 To test, resize the browser window. Reload and repeat a few times. Each time you resize, the orange rectangle and
27 its contents should vanish, and the browser should not crash.
28</p>
29<div id="target" style="border: solid orange;">
30 <embed type="application/x-webkit-test-netscape"></embed>
31 <iframe src=""></iframe>
32 <iframe src=""></iframe>
33 <iframe src=""></iframe>
34</div>
35<div style="border: solid blue;">
36 <embed type="application/x-webkit-test-netscape" onsetwindow="hideFirst()"></embed>
37</div>