blob: 127345bd5de6be86760721f6ff54adde9740fc1f (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
|
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML//EN">
<html>
<head>
<script>
function removeAreaElement() {
document.getElementById("test").innerHTML=1
}
function queryTitleOnDecendants(accessibilityObject) {
accessibilityObject.name
var count = accessibilityObject.childrenCount;
for (var i = 0; i < count; ++i)
queryTitleOnDecendants(accessibilityObject.childAtIndex(i));
}
</script>
<script src="../resources/js-test.js"></script>
</head>
<body>
<img usemap="#map">
<map name="map" id="test"><area href="javascript:document.getElementById('result').innerHTML='area clicked'" /></map>
<p id="description"></p>
<div id="console"></div>
<script>
description("Requesting the title of an AccessibilityImageMapLink can cause a crash when the map's area element has been removed.");
if (window.accessibilityController) {
// First build up full accessibility tree.
document.body.focus();
queryTitleOnDecendants(accessibilityController.focusedElement);
removeAreaElement()
// Now call request the title for each accessibility object.
document.body.focus();
queryTitleOnDecendants(accessibilityController.focusedElement);
}
</script>
</body>
</html>
|
