[webkit-reviews] review requested: [Bug 47759] Crash while processing ill-formed <textPath> ouside of <text> : [Attachment 74958] Fix and layout test

[bugzilla-daemon at webkit.org]

Cosmin Truta <ctruta at chromium.org> has asked  for review:
Bug 47759: Crash while processing ill-formed <textPath> ouside of <text>
https://bugs.webkit.org/show_bug.cgi?id=47759

Attachment 74958: Fix and layout test
https://bugs.webkit.org/attachment.cgi?id=74958&action=review

------- Additional Comments from Cosmin Truta <ctruta at chromium.org>
There is one thing that isn't exactly done as stated in the content model spec:

SVGTextPathElement::childShouldCreateRenderer allows <textPath> inside
<textPath>. (SVGTextPathElement::rendererIsNeeded is fine, however.)
This is to accommodate <textPath><a><textpath>Text</textPath></a></textPath>,
which is tested in svg/custom/text-linking.svg