Index: LayoutTests/fast/events/dom-character-data-modified-textarea-crash.html |
=================================================================== |
--- LayoutTests/fast/events/dom-character-data-modified-textarea-crash.html (revision 127640) |
+++ LayoutTests/fast/events/dom-character-data-modified-textarea-crash.html (working copy) |
@@ -5,17 +5,28 @@ |
// This test uses a weired textarea to reproduce the issue. The condition of a crash is very sensitive to HTML. |
// If we add a new-line at EOF or add other tags in <body> part, the crash will be unlikely to happen. |
// For example, if we move this comment to the actual HTML or try to load 'js-test-pre.js', the crash won't happen. |
-// Mutation events should not be dispatched on this case. This bug is being tracked by webkit bug https://bugs.webkit.org/show_bug.cgi?id=87372 |
-if (window.testRunner) |
+// |
+// * Mutation events should not be dispatched on this case. This bug is being tracked by webkit bug https://bugs.webkit.org/show_bug.cgi?id=87372 |
+// * ... And Mutation events are no longer fired. See https://bugs.webkit.org/show_bug.cgi?id=93427. |
+// We would keep this test just for preventing regression. |
+if (window.testRunner) { |
testRunner.dumpAsText(); |
+ testRunner.waitUntilDone(); |
+} |
-document.addEventListener("DOMCharacterDataModified", function() { |
+function attackAndFinish() { |
document.designMode = "on"; |
document.execCommand("SelectAll"); |
document.execCommand("Delete"); |
document.body.offsetLeft; |
document.body.innerHTML = 'Test passes if a DOMCharacterModified event on the textarea does not crash.'; |
-}); |
+ if (window.testRunner) |
+ testRunner.notifyDone(); |
+} |
+ |
+document.addEventListener("DOMCharacterDataModified", attackAndFinish); |
+ |
+window.setTimeout(attackAndFinish, 10); |
</script> |
</head> |
-<textarea> < |
+<textarea> < |