Chromium Code Reviews| Index: LayoutTests/fast/dom/HTMLScriptElement/append-child-style-crash.html |
| diff --git a/LayoutTests/fast/dom/HTMLScriptElement/append-child-style-crash.html b/LayoutTests/fast/dom/HTMLScriptElement/append-child-style-crash.html |
| new file mode 100644 |
| index 0000000000000000000000000000000000000000..3b958cf03d631e8e610a4f017c07908fcfee6bff |
| --- /dev/null |
| +++ b/LayoutTests/fast/dom/HTMLScriptElement/append-child-style-crash.html |
| @@ -0,0 +1,26 @@ |
| +<!DOCTYPE html> |
| +<body> |
| +<script> |
| +function callback() { |
| + style0.innerHTML = ''; |
| + script0.removeChild(style0); |
| +} |
| + |
| +style0=document.createElement('style'); |
| +style0.innerHTML = 'span { color: blue; }'; |
| + |
| +script0=document.createElement('script'); |
| +script0.innerHTML = "callback();"; |
| +script0.appendChild(style0); |
| +document.body.appendChild(script0); |
| + |
| +if (window.testRunner) { |
| + testRunner.waitUntilDone(); |
| + testRunner.dumpAsText(); |
| + setTimeout(function() { |
| + testRunner.notifyDone(); |
| + }, 0); |
|
esprehn
2014/04/02 19:45:10
ditto
|
| +} |
| +</script> |
| +<p>PASS unless crash</p> |
| +</body> |