Regression(r188105): Seems to have caused crashes during PLT on some iPads
[WebKit-https.git] / LayoutTests / fast / css / image-set-value-not-removed-crash.html
1 <!DOCTYPE html>
2 <html>
3 A
4 <style>
5 @-webkit-keyframes anim1 {
6     0% { 
7         opacity: 0.5772; border-image: 26829%;
8     } 
9     100% {
10         opacity: 0.3167;
11     }
12 }
13 * { 
14     -webkit-animation-name: anim1;
15     -webkit-animation-duration: 1s;
16 }
17 .class1 { 
18     border-image: -webkit-image-set(url(#does-not-exist) 25x, url("does-not-exist.gif") 206x) 2 126 158 166 fill;
19 }
20 </style>
21 <script>
22 if (window.testRunner)
23     testRunner.dumpAsText();
24
25 var docElement = document.body;
26 docElement.contentEditable = "true";
27
28 function crash() {
29     test1 = document.createElementNS("http://www.w3.org/1999/xhtml", "td");
30     test1.setAttribute("class", "class1");
31     docElement.appendChild(test1);
32     document.execCommand("SelectAll", false, null)
33     document.execCommand("InsertText", false, "PASS. WebKit did not crash.")
34     for (i = 0; i != 49; i++)
35          window.getSelection().modify("move", "forward", "character");
36
37     document.execCommand("Italic", false, null);
38 }
39 document.addEventListener("DOMContentLoaded", crash, false);
40 </script>
41 </html>