1 <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN" 2 "http://www.w3.org/TR/html4/strict.dtd"> 3 <html lang="en"> 4 <head> 5 <script> 6 function init () { 7 document.getElementById("test").focus(); 8 } 9 10 function foo () { 11 document.open(); 12 document.write('Test has passed.'); 13 document.close(); 14 } 15 </script> 16 </head> 17 <body onload="init();"> 18 <p><b>BUG ID:</b> <a href="rdar://problem/4181058">4181058</a> 8C45: Safari repro crash with document.write (WebCore::Node::dispatchEvent)</p> 19 20 <p id="test" style="background-color:skyblue; padding:3px;"><b>STEPS TO TEST:</b> 21 <ul> 22 <li> Press the Tab key. This will remove focus from the text field, and should call document.write without crashing. 23 </ul> 24 </p> 25 26 <p id="success" style="background-color:palegreen; padding:3px;"><b>TEST PASS:</b> 27 You should see text that says "Test has passed". 28 </p> 29 30 <p id="failure" style="background-color:#FF3300; padding:3px;"><b>TEST FAIL:</b> 31 If the test fails, the browser will crash. 32 </p> 33 34 <input type="text" id="test" onblur="foo();" /> 35 36 </body> 37 </html>