third_party/WebKit/LayoutTests/plugins/object-onfocus-mutation-crash.html


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24

<!DOCTYPE html>
<html>
<body>
<script>
if (window.testRunner) {
    testRunner.dumpAsText();
    testRunner.waitUntilDone();
}

function finish() {
    if (window.testRunner)
        testRunner.notifyDone();
}

function crash() {
    document.body.innerHTML = "PASS. WebKit didn't crash.";
    setTimeout("finish()", 0);
}
</script>
<object data="a">
<input autofocus="" onfocus="crash()">
</object>
</body>
</html>