[webkit-reviews] review requested: [Bug 47759] Crash while processing ill-formed <textPath> ouside of <text> : [Attachment 75109] Fix and layout test

[bugzilla-daemon at webkit.org]

Cosmin Truta <ctruta at chromium.org> has asked  for review:
Bug 47759: Crash while processing ill-formed <textPath> ouside of <text>
https://bugs.webkit.org/show_bug.cgi?id=47759

Attachment 75109: Fix and layout test
https://bugs.webkit.org/attachment.cgi?id=75109&action=review

------- Additional Comments from Cosmin Truta <ctruta at chromium.org>
Actually, <text> inside <a> inside <textPath> shouldn't work either, because
the spec says "The ‘a’ element may contain any element that its parent may
contain, except itself", and <textPath> cannot contain <text>.

In my interpretation of the content model, <textPath> cannot be inside another
<textPath> in any way. That line from text-linking.svg must be removed.
However, since I don't have the means to regenerate the expected image output
of text-linking.svg, I will open a separate bug 50211. This will be committed
after that one gets committed.