[Webkit-unassigned] [Bug 31660] New: REGRESSION (r49394): Image load event fires before the document fragment is attached.

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=31660

           Summary: REGRESSION (r49394): Image load event fires before the
                    document fragment is attached.
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: All
               URL: http://klout.com/profile/stats/ghosttie/
        OS/Version: All
            Status: NEW
          Keywords: InChromiumBugs
          Severity: Normal
          Priority: P2
         Component: HTML DOM
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: dglazkov at chromium.org
                CC: hyatt at apple.com, darin at apple.com


What happens here is this:

* site loads some HTML via XHR
* then attempts to inject it into DOM
* as the HTML is being parsed, we encounter an image element with an onload
handler
* image has already been loaded on the site, so we fire the onload handler
immediately
* onload handler attempts to document.getElementById the element in the
fragment.
* fragment isn't yet attached to DOM
* sadness ensues.

Originally reported at http://cbug.com/27148.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.