offset-path-url-crash.html (1046B)
1 <!DOCTYPE html> 2 <html> 3 <head> 4 <title>CSS Motion Path: path(url) paths</title> 5 <link rel="help" href="https://crbug.com/1465301"> 6 <meta name="assert" content="This tests that path(<url>) does not crash when the url() is removed before target."> 7 <style> 8 #test { 9 position: absolute; 10 left: 300px; 11 top: 0px; 12 width: 300px; 13 height: 200px; 14 background-color: lime; 15 transform-origin: 0px 0px; 16 offset-path: url(#target); 17 } 18 </style> 19 </head> 20 <body onload="start();"> 21 <iframe id="target"></iframe> 22 <div id="test"></div> 23 </body> 24 <script> 25 async function change_style_and_remove() { 26 let el = document.querySelectorAll("style")[0]; 27 el.innerHTML = "garbadge"; 28 let t = document.createElement("frame"); 29 document.body.appendChild(t); 30 let target = document.querySelectorAll("iframe")[0]; 31 target.parentNode.removeChild(target); 32 } 33 function start() { 34 change_style_and_remove(); 35 } 36 </script> 37 </html>