RESOLVED DUPLICATE of bug 25567 26251
Crash when attach an element into a title element 
https://bugs.webkit.org/show_bug.cgi?id=26251
Summary Crash when attach an element into a title element
Arko Saha
Reported 2009-06-07 23:16:27 PDT
Fetch the given URl. Observe that Safari browser is crashing while attaching an element in title tag.
Attachments
Add attachment proposed patch, testcase, etc.
Mark Rowe (bdash)
Comment 1 2009-06-08 08:38:10 PDT
The page contains: <script> document.write("<title>x"); document.title = "x"; document.write(""); </script>
Mark Rowe (bdash)
Comment 2 2009-06-08 08:38:32 PDT
<rdar://problem/6954947>
Alexey Proskuryakov
Comment 3 2009-06-21 00:11:28 PDT
*** This bug has been marked as a duplicate of 25567 ***
Note You need to log in before you can comment on or make changes to this bug.