Donut  |  1.6_r1
Html程序  |  37行  |  1.09 KB 

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN"
        "http://www.w3.org/TR/html4/strict.dtd">
<html lang="en">
<head>
    <script>
        function init () {
            document.getElementById("test").focus();
        }

        function foo () {
            document.open();
            document.write('Test has passed.');
            document.close();
        }
    </script>
</head>
<body onload="init();">
<p><b>BUG ID:</b> <a href="rdar://problem/4181058">4181058</a> 8C45: Safari repro crash with document.write (WebCore::Node::dispatchEvent)</p>

<p id="test" style="background-color:skyblue; padding:3px;"><b>STEPS TO TEST:</b> 
<ul>
<li> Press the Tab key.  This will remove focus from the text field, and should call document.write without crashing.
</ul>
</p>

<p id="success" style="background-color:palegreen; padding:3px;"><b>TEST PASS:</b> 
You should see text that says "Test has passed".
</p>

<p id="failure" style="background-color:#FF3300; padding:3px;"><b>TEST FAIL:</b>  
If the test fails, the browser will crash.
</p>

<input type="text" id="test" onblur="foo();" />  

</body>
</html>