1<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN" 2 "http://www.w3.org/TR/html4/strict.dtd"> 3<html lang="en"> 4<head> 5<script> 6function removeDiv() 7{ 8 var parent = document.getElementById("parent"); 9 var child = document.getElementById("child"); 10 parent.removeChild(child); 11} 12</script> 13</head> 14<body> 15<p><b>BUG ID:</b> <a href="rdar://problem/4621649">4621649</a> repro crash: Upload link causes crash on pages.google.com in Frame::nodeForWidget</p> 16 17<p id="test" style="background-color:skyblue; padding:3px;"><b>STEPS TO TEST:</b> 18<ol> 19<li> To test this bug, just choose any file 20</ol> 21</p> 22 23<p id="success" style="background-color:palegreen; padding:3px;"><b>TEST PASS:</b> 24Should see the file chooser disappear and the word "Success" will appear 25</p> 26 27<p id="failure" style="background-color:#FF3300; padding:3px;"><b>TEST FAIL:</b> 28Safari will crash in WebCore::Frame::nodeForWidget. 29</p> 30 31<div id="parent"> 32<div id="child"> 33<form> 34<input id="theFile" type="file" onchange="removeDiv();"> 35</form> 36</div> 37</div> 38 39 40 41</body> 42</html> 43