<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN"
"http://www.w3.org/TR/html4/strict.dtd">
<html lang="en">
<head>
<script>
function init () {
document.getElementById("test").focus();
}
function foo () {
document.open();
document.write('Test has passed.');
document.close();
}
</script>
</head>
<body onload="init();">
<p><b>BUG ID:</b> <a href="rdar://problem/4181058">4181058</a> 8C45: Safari repro crash with document.write (WebCore::Node::dispatchEvent)</p>
<p id="test" style="background-color:skyblue; padding:3px;"><b>STEPS TO TEST:</b>
<ul>
<li> Press the Tab key. This will remove focus from the text field, and should call document.write without crashing.
</ul>
</p>
<p id="success" style="background-color:palegreen; padding:3px;"><b>TEST PASS:</b>
You should see text that says "Test has passed".
</p>
<p id="failure" style="background-color:#FF3300; padding:3px;"><b>TEST FAIL:</b>
If the test fails, the browser will crash.
</p>
<input type="text" id="test" onblur="foo();" />
</body>
</html>
Codebase Browser
chromium