third_party/WebKit/LayoutTests/fast/dom/Range/range-created-in-mutation-event-crash.xhtml

   1 <!DOCTYPE html>
   2 <html xmlns="http://www.w3.org/1999/xhtml">
   3 <style></style>
   4 <script>
   5 <![CDATA[
   6
   7 window.onload = function () {
   8     document.execCommand("SelectAll", false);
   9
  10     var range = null;
  11
  12     document.addEventListener("DOMNodeRemovedFromDocument", function () {
  13         range = getSelection().getRangeAt(0);
  14     },true);
  15
  16     getSelection().getRangeAt(0).extractContents();
  17     range.getBoundingClientRect();
  18
  19     if (window.testRunner)
  20         testRunner.dumpAsText();
  21
  22     alert("This test calls getBoundingClientRect on a range obtained inside a mutation event listener.\n"
  23     + "The test passes if WebKit doesn't crash.\n\n"
  24     + "PASS.");
  25 }
  26
  27 ]]>
  28 </script>
  29 <input/>
  30 </html>
  31