[Webkit-unassigned] [Bug 51389] Assertion failure after removing a selection in keydown handler

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=51389





--- Comment #5 from Ryosuke Niwa <rniwa at webkit.org>  2010-12-21 13:48:38 PST ---
Created an attachment (id=77148)
 --> (https://bugs.webkit.org/attachment.cgi?id=77148&action=review)
generalized demo

(In reply to comment #4)
> (In reply to comment #3)
> > The problem is that Range::processContents (called by deleteContents) isn't updating the selection when modifying the text node and/or removing the nodes.
> 
> Presumably Range::processContents is doing DOM manipulation that could also be called directly from JavaScript. If so, then a change to Range would not be an acceptable fix. The fix needs to also handle the case where the same manipulation was done without using Range.
> 
> Is that right?

You're absolutely right. This problem is prevalent in all DOM manipulation APIs.  I attached a simplified test case.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.