[Webkit-unassigned] [Bug 7855] REGRESSION: document.open() in a script added through document.write() causes a crash

[bugzilla-daemon at opendarwin.org]

http://bugzilla.opendarwin.org/show_bug.cgi?id=7855


ap at nypop.com changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|RESOLVED                    |REOPENED
         Resolution|WORKSFORME                  |




------- Comment #4 from ap at nypop.com  2006-03-20 11:56 PDT -------
This still crashes for me 100% reproducibly with a clean rebuild of ToT, no
local modifications. Assigning to myself, as it looks like I'm the only one
experiencing this. No crash with a nightly build, either.

Somehow, the crash doesn't happen when clicking on the attachment in Bugzilla -
but I launch ToT, paste http://bugzilla.opendarwin.org/attachment.cgi?id=7170
in the address bar, press Return and get the crash.


-- 
Configure bugmail: http://bugzilla.opendarwin.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.