43 lines
1.0 KiB
HTML
43 lines
1.0 KiB
HTML
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN"
|
|
"http://www.w3.org/TR/html4/strict.dtd">
|
|
<html lang="en">
|
|
<head>
|
|
<script>
|
|
function removeDiv()
|
|
{
|
|
var parent = document.getElementById("parent");
|
|
var child = document.getElementById("child");
|
|
parent.removeChild(child);
|
|
}
|
|
</script>
|
|
</head>
|
|
<body>
|
|
<p><b>BUG ID:</b> <a href="rdar://problem/4621649">4621649</a> repro crash: Upload link causes crash on pages.google.com in Frame::nodeForWidget</p>
|
|
|
|
<p id="test" style="background-color:skyblue; padding:3px;"><b>STEPS TO TEST:</b>
|
|
<ol>
|
|
<li> To test this bug, just choose any file
|
|
</ol>
|
|
</p>
|
|
|
|
<p id="success" style="background-color:palegreen; padding:3px;"><b>TEST PASS:</b>
|
|
Should see the file chooser disappear and the word "Success" will appear
|
|
</p>
|
|
|
|
<p id="failure" style="background-color:#FF3300; padding:3px;"><b>TEST FAIL:</b>
|
|
Safari will crash in WebCore::Frame::nodeForWidget.
|
|
</p>
|
|
|
|
<div id="parent">
|
|
<div id="child">
|
|
<form>
|
|
<input id="theFile" type="file" onchange="removeDiv();">
|
|
</form>
|
|
</div>
|
|
</div>
|
|
|
|
|
|
|
|
</body>
|
|
</html>
|