[Webkit-unassigned] [Bug 41948] REGRESSION(r60392): Crash during page load inside JSObject::defaultValue

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=41948





--- Comment #8 from Peter Speck <speck at vitality.dk>  2010-07-09 13:25:53 PST ---
It doesn't crash if the iframe is on the same host (security orgin?) as its parent document.

Minimal html which crashes:
http://glimmerblocker.org/site/wkbug41948/

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.