| aliceli1 | bbb366f | 2006-07-21 05:30:14 +0000 | [diff] [blame] | 1 | <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN" |
| 2 | "http://www.w3.org/TR/html4/strict.dtd"> |
| 3 | <html lang="en"> |
| 4 | <head> |
| 5 | <script> |
| 6 | function removeDiv() |
| 7 | { |
| 8 | var parent = document.getElementById("parent"); |
| 9 | var child = document.getElementById("child"); |
| 10 | parent.removeChild(child); |
| 11 | } |
| 12 | </script> |
| 13 | </head> |
| 14 | <body> |
| 15 | <p><b>BUG ID:</b> <a href="rdar://problem/4621649">4621649</a> repro crash: Upload link causes crash on pages.google.com in Frame::nodeForWidget</p> |
| 16 | |
| 17 | <p id="test" style="background-color:skyblue; padding:3px;"><b>STEPS TO TEST:</b> |
| 18 | <ol> |
| 19 | <li> To test this bug, just choose any file |
| 20 | </ol> |
| 21 | </p> |
| 22 | |
| 23 | <p id="success" style="background-color:palegreen; padding:3px;"><b>TEST PASS:</b> |
| 24 | Should see the file chooser disappear and the word "Success" will appear |
| 25 | </p> |
| 26 | |
| 27 | <p id="failure" style="background-color:#FF3300; padding:3px;"><b>TEST FAIL:</b> |
| 28 | Safari will crash in WebCore::Frame::nodeForWidget. |
| 29 | </p> |
| 30 | |
| 31 | <div id="parent"> |
| 32 | <div id="child"> |
| 33 | <form> |
| 34 | <input id="theFile" type="file" onchange="removeDiv();"> |
| 35 | </form> |
| 36 | </div> |
| 37 | </div> |
| 38 | |
| 39 | |
| 40 | |
| 41 | </body> |
| 42 | </html> |
