1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
|
<style>
div { padding: 10px; margin: 8px; }
embed { width: 50px; height: 50px; }
iframe { width: 50px; height: 50px; }
</style>
<script>
var callCount = 0;
function hideFirst()
{
if (++callCount != 2)
return;
var target = document.getElementById("target");
if (!target)
return;
target.parentNode.removeChild(target);
document.body.offsetTop;
}
</script>
<p>
Test that plug-ins cannot cause the NSView hierarchy to change beneath <tt>-[NSView _invalidateGStatesForTree]</tt>.
</p>
<p>
To test, resize the browser window. Reload and repeat a few times. Each time you resize, the orange rectangle and
its contents should vanish, and the browser should not crash.
</p>
<div id="target" style="border: solid orange;">
<embed type="application/x-webkit-test-netscape"></embed>
<iframe src=""></iframe>
<iframe src=""></iframe>
<iframe src=""></iframe>
</div>
<div style="border: solid blue;">
<embed type="application/x-webkit-test-netscape" onsetwindow="hideFirst()"></embed>
</div>
|
