[Webkit-unassigned] [Bug 66241] Crash when inserting text with a trailing newline into a textarea via JS

Wed Aug 24 21:27:33 PDT 2011

https://bugs.webkit.org/show_bug.cgi?id=66241

--- Comment #8 from Ryosuke Niwa <rniwa at webkit.org>  2011-08-24 21:27:33 PST ---
(In reply to comment #7)
> (In reply to comment #6)
> > It's causing the shadow DOM tree to be re-created.  The text node is in the shadow tree.
> 
> Do you mean HTMLTextElement::innerTextElement() is re-created?

Yes.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.