1 <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN" 2 "http://www.w3.org/TR/html4/strict.dtd"> 3 <html lang="en"> 4 <head> 5 <script> 6 function removeDiv() 7 { 8 var parent = document.getElementById("parent"); 9 var child = document.getElementById("child"); 10 parent.removeChild(child); 11 } 12 </script> 13 </head> 14 <body> 15 <p><b>BUG ID:</b> <a href="rdar://problem/4621649">4621649</a> repro crash: Upload link causes crash on pages.google.com in Frame::nodeForWidget</p> 16 17 <p id="test" style="background-color:skyblue; padding:3px;"><b>STEPS TO TEST:</b> 18 <ol> 19 <li> To test this bug, just choose any file 20 </ol> 21 </p> 22 23 <p id="success" style="background-color:palegreen; padding:3px;"><b>TEST PASS:</b> 24 Should see the file chooser disappear and the word "Success" will appear 25 </p> 26 27 <p id="failure" style="background-color:#FF3300; padding:3px;"><b>TEST FAIL:</b> 28 Safari will crash in WebCore::Frame::nodeForWidget. 29 </p> 30 31 <div id="parent"> 32 <div id="child"> 33 <form> 34 <input id="theFile" type="file" onchange="removeDiv();"> 35 </form> 36 </div> 37 </div> 38 39 40 41 </body> 42 </html> 43
