LayoutTests/fast/dom/frame-deleted-in-document-open.html - Issue 8028034: Merge 95667 - [Chromium] Protect the Frame in V8HTMLDocument::openCallback

Side by Side Diff

Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.

Keyboard Shortcuts

	File
u :	up to issue
j / k :	jump to file after / before current file
J / K :	jump to next file with a comment after / before current file
	Side-by-side diff
i :	toggle intra-line diffs
e :	expand all comments
c :	collapse all comments
s :	toggle showing all comments
n / p :	next / previous diff chunk or comment
N / P :	next / previous comment
<Up> / <Down> :	next / previous line

	Issue
u :	up to list of issues
j / k :	jump to patch after / before current patch
o / <Enter> :	open current patch in side-by-side view
i :	open current patch in unified diff view

	Issue List
j / k :	jump to issue after / before current issue
o / <Enter> :	open current issue

Side by Side Diff: LayoutTests/fast/dom/frame-deleted-in-document-open.html

Issue 8028034: Merge 95667 - [Chromium] Protect the Frame in V8HTMLDocument::openCallback (Closed) Base URL: http://svn.webkit.org/repository/webkit/branches/chromium/835/

Patch Set: Created 9 years, 2 months ago

Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.

Jump to:

View unified diff | Download patch

OLD	NEW
1 <html>	1 <html>

2 <head>	2 <head>

3 <script>	3 <script>

4 if (window.layoutTestController)	4 if (window.layoutTestController)

5 layoutTestController.dumpAsText();	5 layoutTestController.dumpAsText();

6	6

7 window.onload = function()	7 window.onload = function()

8 {	8 {

9 frame = document.body.appendChild(document.createElement("iframe"));	9 frame = document.body.appendChild(document.createElement("iframe"));

10	10

11 frame.contentWindow.open = null;	11 frame.contentWindow.open = null;

12 frame.contentWindow.__defineGetter__("open", function() {	12 frame.contentWindow.__defineGetter__("open", function() {

13 document.body.removeChild(frame);	13 document.body.removeChild(frame);

14 return function() { };	14 return function() { };

15 });	15 });

16 frame.contentDocument.open(1, 1, 1, 1, 1);	16 frame.contentDocument.open(1, 1, 1, 1, 1);

17 }	17 }

18 </script>	18 </script>

19 </head>	19 </head>

20 <body>	20 <body>

21 This test passes if it doesn't crash.	21 This test passes if it doesn't crash.

22 </body>	22 </body>

23 </html>	23 </html>

OLD	NEW

« no previous file with comments | « no previous file | LayoutTests/fast/dom/frame-deleted-in-document-open-expected.txt » ('j') | no next file with comments »