[Webkit-unassigned] [Bug 26251] Crash when attach an element into a titlle element.

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=26251


mrowe at apple.com changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
           Keywords|                            |HasReduction




------- Comment #1 from mrowe at apple.com  2009-06-08 08:38 PDT -------
The page contains:

<script>
  document.write("<title>x");
  document.title = "x";
  document.write("");
</script>


-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.