I meant to say "the body tag's onblur handler calls..."
Doron, could you get the stacks?
confirm on rc1 (2002041711) & win2k (same as submitter) TB5568235Q
Confirming crash using current Mozilla trunk binaries and debug builds on WinNT. Here is the source of the HTML testcase: <html><head><title>Bug 139756</title></head> <body onBlur ='self.close();'> <img SRC="http://www.mozilla.org/images/mozilla-banner.gif"> </body></html> The WinNT stack trace I've attached above is the same as the Talkback incidents. I crash by loading the testcase and following step 2 above: 2) Right-click the image and select View Image One can also crash in Mozilla by loading the testcase and doing View Page Source. Try that in IE6; you get an alertbox warning you that the page is trying to close itself - I'm not sure of the correct component; a lot of the stack trace involves XUL document stuff. Totally unsure of who handles this; would Boris know? In the meantime, this doesn't appear to be a JS Engine bug. Reasssigning to Browser-General; please reassign as necessary -
Ah, fun. We already have a bug on this (same stack, same situation) *** This bug has been marked as a duplicate of 132534 ***
Boris: thanks! Verified Duplicate. firstname.lastname@example.org: you have been cc'ed on the duplicate bug so you can follow its progress -