[Webkit-unassigned] [Bug 39989] New: Inline elements with contenteditable - applying RichText crashes browser

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=39989

           Summary: Inline elements with contenteditable - applying
                    RichText crashes browser
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: PC
               URL: http://veitlehmann.de/webkit-crash.html
        OS/Version: Windows XP
            Status: UNCONFIRMED
          Severity: Major
          Priority: P2
         Component: HTML Editing
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: levito82 at gmail.com


Elements styled as inline, inline-block or inline-table with contenteditable=true crash WebKit browsers when RichText is applied.

To reproduce the bug:
- Go to http://veitlehmann.de/webkit-crash.html
- OR: try this snippet: <span contenteditable="true">select text, press ctrl+b</span>
- Select some text in the contenteditable areas and press ctrl+b or ctrl+i

If the element ist styled as inline* and doesn't float, the browser will crash.

This happens regardless of the element type - the styling counts.
It also happens with insite text editors like http://www.nicedit.com applied on such elements.

Contenteditable on inline-styled elements with RichText is useful for CMS with insite editing.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.