[Webkit-unassigned] [Bug 10785] Safari(417.9.3) crashes on .innerhtml, if the script element, inside a div element, redefines the document body.

[bugzilla-daemon at opendarwin.org]

http://bugzilla.opendarwin.org/show_bug.cgi?id=10785


ddkilzer at kilzer.net changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                URL|http://metasploit.com/users/|http://browserfun.blogspot.c
                   |hdm/tools/browserfun/mobb_03|om/2006/07/mobb-31-safari-
                   |1.html                      |khtmlparserpoponeblock.html
             Status|NEW                         |RESOLVED
           Keywords|                            |InRadar
         Resolution|                            |FIXED




------- Comment #3 from ddkilzer at kilzer.net  2006-09-08 07:30 PDT -------
Thanks for reporting this bug!  However, it has already been fixed in WebKit
"tip of tree" (ToT) in SVN in r15890, and a patch has been applied to the
Safari-2-0-branch in SVN in r15891, which means it will eventually show up in
an OS X security fix or point release update.

You may test recent WebKit builds using the nightlies: 
http://nightly.webkit.org/

Per SVN logs, this bug is in Radar as:  rdar://problem/4661982


-- 
Configure bugmail: http://bugzilla.opendarwin.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.