Index: LayoutTests/fast/frames/javascript-url-style-crash.html |
diff --git a/LayoutTests/fast/frames/javascript-url-style-crash.html b/LayoutTests/fast/frames/javascript-url-style-crash.html |
new file mode 100644 |
index 0000000000000000000000000000000000000000..90fd014a4e2b08857ea894ce896d30b4fc6ca5b8 |
--- /dev/null |
+++ b/LayoutTests/fast/frames/javascript-url-style-crash.html |
@@ -0,0 +1,26 @@ |
+<!DOCTYPE html> |
+<body> |
+<script> |
+function callback() { |
+ style0.innerHTML = ''; |
+ iframe0.removeChild(style0); |
+} |
+ |
+style0=document.createElement('style'); |
+style0.innerHTML = 'span { color: blue; }'; |
+ |
+iframe0=document.createElement('iframe'); |
+iframe0.appendChild(style0); |
+iframe0.src='javascript:window.top.callback();'; |
+document.body.appendChild(iframe0); |
+ |
+if (window.testRunner) { |
+ testRunner.waitUntilDone(); |
+ testRunner.dumpAsText(); |
+ setTimeout(function() { |
+ testRunner.notifyDone(); |
+ }, 0); |
esprehn
2014/04/02 19:45:10
What are you trying to do with the setTimeout? Wai
gmorrita
2014/04/02 19:47:30
Oops. This part just survived from my first change
|
+} |
+</script> |
+<p>PASS unless crash</p> |
+</body> |