[webkit-reviews] review requested: [Bug 9618] Pasting a table can cause content after the table to be absorbed into the table : [Attachment 9075] patch

[bugzilla-request-daemon at opendarwin.org]

Graham Dennis <Graham.Dennis at gmail.com> has asked Justin Garcia
<justin.garcia at apple.com> for review:
Bug 9618: Pasting a table can cause content after the table to be absorbed into
the table
http://bugzilla.opendarwin.org/show_bug.cgi?id=9618

Attachment 9075: patch
http://bugzilla.opendarwin.org/attachment.cgi?id=9075&action=edit

------- Additional Comments from Graham Dennis <Graham.Dennis at gmail.com>
This bug is caused in the code that merges the start of a document fragment
into the document. It merges nodes from the start until it hits a block flow.
If the last of these is a table, and the last descendant of the table is a
block element (e.g. in the testcase for this bug), then m_lastNodeInserted is
set to that block element in the table. I'm not sure if this is the correct
fix, but I simply cause a table to be treated like a block flow when it is
encountered at the start of a document fragment, i.e. it isn't merged like the
inline elements.