RESOLVED FIXED 19745
Crash caused by DOM modification
https://bugs.webkit.org/show_bug.cgi?id=19745
Summary Crash caused by DOM modification
Berend-Jan Wever
Reported 2008-06-24 08:12:36 PDT
The following HTML causes an Access Violation in Safari 3.1.1: <BODY onload="go()"><SCRIPT> function go() { document.body.outerHTML=''; document.createElement('map').innerHTML='<frameSet></frameSet><em><div><link></div></em><head></head><html>'; } </SCRIPT></BODY>
Attachments
David Kilzer (:ddkilzer)
Comment 1 2009-07-22 12:10:53 PDT
This does not reproduce in ToT WebKit. Marking as RESOLVED/FIXED.
Note You need to log in before you can comment on or make changes to this bug.