Created attachment 289834 [details] testcase See testcase, I get this assertion when shift-tabbing in this document in current debug trunk build. ###!!! ASSERTION: Must have view manager: '!isSafeToFlush || mViewManager', file c:/mozilla-build/mozilla/layout/base/nsPresShell.cpp, line 4427 The iframe source consists of this: <html><head></head> <body> <input> <span onbeforecopy="window.frameElement.parentNode.removeChild(window.frameElement)"> <input type="checkbox"> </span> </body> </html> I guess that makes it more or less a regression from bug 280959.
WFM. The buggy onbeforecopy support has been removed (bug 418457).
Status: NEW → RESOLVED
Last Resolved: 10 years ago
Resolution: --- → WORKSFORME
You need to log in before you can comment on or make changes to this bug.