[Webkit-unassigned] [Bug 7855] New: REGRESSION: document.open() in a script added through document.write() causes a crash

Sun Mar 19 00:04:14 PST 2006

http://bugzilla.opendarwin.org/show_bug.cgi?id=7855

           Summary: REGRESSION: document.open() in a script added through
                    document.write() causes a crash
           Product: WebKit
           Version: 420+ (nightly)
          Platform: Macintosh
        OS/Version: Mac OS X 10.4
            Status: NEW
          Keywords: HasReduction, Regression
          Severity: normal
          Priority: P1
         Component: HTML DOM
        AssignedTo: webkit-unassigned at opendarwin.org
        ReportedBy: ap at nypop.com

This crashed ToT, but not the stock 2.0.3. I have tried reverting the recent
document.open change (bug 4395) to verify that this isn't caused by it
(somewhat surprisingly).

<body>
1
<script>
document.write("<body>2<script>document.open()</script></body>");
</script>
</body>

-- 
Configure bugmail: http://bugzilla.opendarwin.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.