[Webkit-unassigned] [Bug 23956] Safari crashes when cloneNode fails

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Wed Feb 18 17:40:08 PST 2009


https://bugs.webkit.org/show_bug.cgi?id=23956





------- Comment #4 from eric at webkit.org  2009-02-18 17:40 PDT -------
So the nodeName in question is:
"imsss:objectives"

So the problem here is that we're using createElementNS which does namespace
checks when really we want to just clone this XHTML-invalid, html node.

A simple test to reproduce this is probably

var node = document.createElement("foo:bar");
var clone = node.cloneNode(); // probably crashes.


-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.



More information about the webkit-unassigned mailing list