[Webkit-unassigned] [Bug 23318] click event listener remains registered after onclick attribute is removed

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=23318





------- Comment #5 from darin at apple.com  2009-01-14 09:38 PDT -------
(In reply to comment #4)
> If you do removeAttribute, then it's different. I'll add comments about that
> now.

I'm almost certain that the bug here boils down to the fact that
Element::removeAttribute doesn't call attributeChanged the way
Element::setAttribute does.

The attributeChanged function calls parseMappedAttribute, and then
HTMLElement::parseMappedAttribute calls
setInlineEventListenerForTypeAndAttribute.

I see now the test case here. There's probably a much simpler way to
demonstrate this problem that doesn't require user intervention.


-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.