1 files changed, 42 insertions, 0 deletions
diff --git a/Source/WebCore/manual-tests/remove-input-file-onchange.html b/Source/WebCore/manual-tests/remove-input-file-onchange.html
new file mode 100644
index 0000000..80368e3
--- /dev/null
+++ b/Source/WebCore/manual-tests/remove-input-file-onchange.html
@@ -0,0 +1,42 @@
+<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN"
+        "http://www.w3.org/TR/html4/strict.dtd">
+<html lang="en">
+<head>
+<script>
+function removeDiv()
+{
+    var parent = document.getElementById("parent");
+    var child = document.getElementById("child");
+    parent.removeChild(child);
+}
+</script>
+</head>
+<body>
+<p><b>BUG ID:</b> <a href="rdar://problem/4621649">4621649</a> repro crash: Upload link causes crash on pages.google.com in Frame::nodeForWidget</p>
+
+<p id="test" style="background-color:skyblue; padding:3px;"><b>STEPS TO TEST:</b> 
+<ol>
+<li> To test this bug, just choose any file
+</ol>
+</p>
+
+<p id="success" style="background-color:palegreen; padding:3px;"><b>TEST PASS:</b> 
+Should see the file chooser disappear and the word "Success" will appear
+</p>
+
+<p id="failure" style="background-color:#FF3300; padding:3px;"><b>TEST FAIL:</b>  
+Safari will crash in WebCore::Frame::nodeForWidget.
+</p>
+
+<div id="parent">
+<div id="child">
+<form>
+<input id="theFile" type="file" onchange="removeDiv();">
+</form>
+</div>
+</div>
+
+
+
+</body>
+</html>