| OLD | NEW |
|---|
| 1 <!DOCTYPE html> | 1 <!DOCTYPE html> |
| 2 <body> | 2 <body> |
| 3 <script src="../js/resources/js-test-pre.js"></script> | 3 <script src="../js/resources/js-test-pre.js"></script> |
| 4 <script> | 4 <script> |
| 5 jsTestIsAsync = true; | 5 jsTestIsAsync = true; |
| 6 var form1; | 6 var form1; |
| 7 var submit1; | 7 var submit1; |
| 8 | 8 |
| 9 function start() { | 9 function start() { |
| 10 form1 = document.createElement('form'); | 10 form1 = document.createElement('form'); |
| 11 submit1 = document.createElement('input'); | 11 submit1 = document.createElement('input'); |
| 12 submit1.type = 'submit'; | 12 submit1.type = 'submit'; |
| 13 form1.addEventListener('submit', handleSubmit, false); | 13 form1.addEventListener('submit', handleSubmit, false); |
| 14 form1.action = 'javascript:gc()'; | 14 form1.action = 'javascript:gc()'; |
| 15 form1.appendChild(submit1); | 15 form1.appendChild(submit1); |
| 16 submit1.click(); | 16 submit1.click(); |
| 17 testPassed('if not crashed.'); | 17 testPassed('if not crashed.'); |
| 18 finishJSTest(); | 18 finishJSTest(); |
| 19 } | 19 } |
| 20 | 20 |
| 21 function handleSubmit() { | 21 function handleSubmit() { |
| 22 form1.removeChild(submit1); | 22 form1.removeChild(submit1); |
| 23 form1 = null; | 23 form1 = null; |
| 24 } | 24 } |
| 25 window.onload = start; | 25 window.onload = start; |
| 26 </script> | 26 </script> |
| 27 <script src="../js/resources/js-test-post.js"></script> | 27 <script src="../js/resources/js-test-post.js"></script> |
| 28 </body> | 28 </body> |
| OLD | NEW |
|---|
Chromium Code Reviews
Issue 26200002:
Merge 158428 "Fix a crash in HTMLFormElement::prepareForSubmission." (Closed)
Base URL: svn://svn.chromium.org/blink/branches/chromium/1599/