[Webkit-unassigned] [Bug 7321] REGRESSION: style tag in body causes two head elements to appear in the DOM
bugzilla-daemon at opendarwin.org
bugzilla-daemon at opendarwin.org
Sun Feb 19 19:52:46 PST 2006
http://bugzilla.opendarwin.org/show_bug.cgi?id=7321
------- Comment #5 from ddkilzer at kilzer.net 2006-02-19 19:52 PDT -------
(In reply to comment #4)
> bool HTMLParser::headCreateErrorCheck(Token* t, RefPtr<NodeImpl>& result)
> {
> if (!head || current->localName() == htmlTag) {
> head = new HTMLHeadElementImpl(document);
> result = head;
> }
> return false;
> }
This change also causes an HTML document like this to crash WebKit:
<<head><style></style></head>
I don't think this change will be quite as easy as Darin first expected.
--
Configure bugmail: http://bugzilla.opendarwin.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
More information about the webkit-unassigned
mailing list