Safari crashes when you click a link with target="_blank" in a document with an http: URL. The crash is in -[WebCoreFrameBridge canTargetLoadInFrame:] due to this change in r17280: - WebCoreFrameBridge *parentBridge = [targetFrame parent]; + WebCoreFrameBridge *parentBridge = Mac([targetFrame _frame]->tree()->parent())->bridge();
Created attachment 11201 [details] Fix
Created attachment 11204 [details] Updated based on comments
Created attachment 11205 [details] Once more into the breach... Silly *s, always being in the wrong place.
Comment on attachment 11205 [details] Once more into the breach... r=me
Landed in r17288.