<!--
This test is mostly a copy of layout/forms/crashtests/373586-1.xhtml,
and it makes sure that the value setter works correctly when setting
the value causes the frame to be reconstructed.
-->
<html xmlns="http://www.w3.org/1999/xhtml" class="reftest-wait">
<head>
<bindings xmlns="http://www.mozilla.org/xbl">
<binding id="foo">
<content>
<children xmlns="http://www.mozilla.org/xbl" />
</content>
</binding>
</bindings>
<script>
function boom()
{
document.getElementById("div").style.MozBinding = "url('#foo')";
var opt1 = document.getElementById("opt1");
opt1.removeChild(opt1.firstChild);
document.getElementById("textarea").value += " y";
document.getElementById("div").style.MozBinding = "";
document.documentElement.removeAttribute("class")
}
window.addEventListener("MozReftestInvalidate", boom, false);
</script>
</head>
<body>
<div id="div">
<textarea rows="3" cols="5" id="textarea">x</textarea>
</div>
<select style="-moz-appearance:none">
<option id="opt1">opt1</option>
</select>
</body>
</html>