[Webkit-unassigned] [Bug 13300] Reproducible crash opening anekdot.ru

Sat Apr 7 09:14:01 PDT 2007

http://bugs.webkit.org/show_bug.cgi?id=13300

------- Comment #6 from ap at webkit.org  2007-04-07 09:14 PDT -------
  Interestingly, the new reduction only crashes for me when closing the page.
Must be some random glitch - I've seen this behavior come and go while making
my original reduction.

> What does the DOM for this look like with the proposed fix?

  According to Hixie's live DOM viewer, it's essentially the same as in Firefox
(modulo empty text nodes and an implicit HEAD). NB: to test in Firefox, you
need to have an explicit <body> element.

HTML
  BODY
    DIV id="anekdotforsearch"
      FORM id="b"
    #text:
    SCRIPT
      #text: document.getElementById('anekdotforsearch').innerHTML="<form
id='b'></form>";
    #text:
    #text:
    INPUT
    #text:
    #text:

-- 
Configure bugmail: http://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.