[Webkit-unassigned] [Bug 52449] Crash when logging into gmail.com with frame flattening turned on.

Mon Feb 7 14:43:05 PST 2011

https://bugs.webkit.org/show_bug.cgi?id=52449


--- Comment #28 from Yael <yael.aharon at nokia.com>  2011-02-07 14:43:05 PST ---
Seems like selections and frame flattening do not want to work together. :(
With frame flattening we do layout recursively, and when we finish the layout of the iframe, we update the selection of that iframe. The parent frame still has its layout flag turned on, and that is causing the crash in comment #26.
This simple example will crash when frame flattening is on:

main frame:
<!DOCTYPE html>
<html >
<body >
<iframe id="My" src="child.html"></iframe>
</body></html>


iframe (child.html)
<!DOCTYPE html>
<script>
window.onload=function(){
    document.getElementById('in').focus(); 
    document.getElementById('p').appendChild(document.createElement("br"));
}
</script>
<body>
<div id='p'><input id="in" value="abcd"><br><br><br><br><br><br><br><br><br></div> 
</body></html>

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.