third_party/WebKit/LayoutTests/plugins/object-onfocus-mutation-crash.html

   1 <!DOCTYPE html>
   2 <html>
   3 <body>
   4 <script>
   5 if (window.testRunner) {
   6     testRunner.dumpAsText();
   7     testRunner.waitUntilDone();
   8 }
   9
  10 function finish() {
  11     if (window.testRunner)
  12         testRunner.notifyDone();
  13 }
  14
  15 function crash() {
  16     document.body.innerHTML = "PASS. WebKit didn't crash.";
  17     setTimeout("finish()", 0);
  18 }
  19 </script>
  20 <object data="a">
  21 <input autofocus="" onfocus="crash()">
  22 </object>
  23 </body>
  24 </html>