[Webkit-unassigned] [Bug 23721] New: Changing dropdown's selectedIndex within onchange handler fires another onchange

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=23721

           Summary: Changing dropdown's selectedIndex within onchange
                    handler fires another onchange
           Product: WebKit
           Version: 525.x (Safari 3.1)
          Platform: PC
               URL: http://chatbotgame.com/?cmd=chat_s
        OS/Version: Windows XP
            Status: UNCONFIRMED
          Severity: Normal
          Priority: P2
         Component: New Bugs
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: jasneet at chromium.org
                CC: jasneet at chromium.org


I Steps:
Go to http://chatbotgame.com/?cmd=chat_s

II Issue:
What happens on this site, is if you answer cancel in the confirmation dialog,
and then blur the dropdown (say by scrolling the page), it will submit the
form.

<select name="filter" onchange="if (this.selectedIndex == 0 || confirm('Turn
safe spy off?  If you 
are younger than 18, click Cancel.') ) document.safeSpyForm.submit(); else
this.selectedIndex = 
0;">
       <option value="on" selected="selected">I'm 13+</option>      
       <option value="off" >I'm 18+</option>      
    </select> 

The problem is in Chromium + Safari, if you change the selectedIndex from
within the onchange handler (notably while it still has focus), then once you
blur if the index has changed it fires another onchange event.

III Other Browsers:
IE7: ok
FF3: ok

IV Nightly tested: 40471

Bug in Chromium : http://code.google.com/p/chromium/issues/detail?id=4251


-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.