[css-filters] Move effect-reference-reset-style-delete-crash.html to WPT
Migrates this test out of third_party/blink/web_tests/css3/filters
and into the WPT-specific directory, adding links to the relevant
specs and a test assertion describing its purpose.
Bug: 1063749
Change-Id: Ie75e00e614e505e7b426d40e334e6e32ba174c37
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2145417
Commit-Queue: Miyoung Shin <myid.shin@igalia.com>
Reviewed-by: Fredrik Söderquist <fs@opera.com>
Cr-Commit-Position: refs/heads/master@{#759523}
diff --git a/css/filter-effects/effect-reference-reset-style-delete-crash.html b/css/filter-effects/effect-reference-reset-style-delete-crash.html
new file mode 100644
index 0000000..e1c0eb9
--- /dev/null
+++ b/css/filter-effects/effect-reference-reset-style-delete-crash.html
@@ -0,0 +1,22 @@
+<!DOCTYPE html>
+<title>CSS Filters: Crash when a SVG filter is deleted</title>
+<link rel="author" title="Stephen White" href="mailto:senorblanco@chromium.org">
+<link rel="help" href="https://drafts.fxtf.org/filter-effects-1/#FilterElement">
+<link rel="issue" href="https://bugs.webkit.org/show_bug.cgi?id=90405">
+<meta name="assert" content="Check that crash doesn't happen when a SVG filter is deleted that used to be referenced by an HTML element but is no longer.">
+<body>
+ <img id="html" style="filter: url(#MyFilter);" src="support/color-palette.png">
+ <svg xmlns="http://www.w3.org/2000/svg" width="0" height="0" version="1.1" id="svg">
+ <defs>
+ <filter id="MyFilter">
+ <feColorMatrix type="hueRotate" values="180"/>
+ </filter>
+ </defs>
+ </svg>
+ <script>
+ html = document.getElementById('html');
+ html.style = "";
+ svg = document.getElementById('svg');
+ svg.parentNode.removeChild(svg);
+ </script>
+</body>
