third_party/WebKit/LayoutTests/fast/forms/form-submission-crash-successful-submit-button.html

   1 <!DOCTYPE html>
   2 <body>
   3 <script src="../../resources/js-test.js"></script>
   4 <script>
   5 jsTestIsAsync = true;
   6 var form1;
   7 var submit1;
   8
   9 function start() {
  10     form1 = document.createElement('form');
  11     submit1 = document.createElement('input');
  12     submit2 = document.createElement('input');
  13     submit1.type = 'submit';
  14     submit2.type = 'image';
  15     form1.addEventListener('submit', handleSubmit, false);
  16     form1.action = 'javascript:removeImage()';
  17     form1.appendChild(submit1);
  18     form1.appendChild(submit2);
  19     submit1.click();
  20     testPassed('if not crashed.');
  21     finishJSTest();
  22 }
  23
  24 function handleSubmit() {
  25     form1.removeChild(submit1);
  26 }
  27
  28 function removeImage() {
  29     form1.removeChild(submit2);
  30     submit2 = null;
  31     gc();
  32 }
  33
  34 window.onload = start;
  35 </script>
  36 </body>