[Webkit-unassigned] [Bug 44886] Reflected attribute input.size wraps on negative values (Chrome), or returns them (Safari)

Mon Sep 26 09:31:01 PDT 2011

https://bugs.webkit.org/show_bug.cgi?id=44886

--- Comment #11 from Darin Adler <darin at apple.com>  2011-09-26 09:31:01 PST ---
(In reply to comment #10)
> Are you talking of a test case which looks as :-
> 
> <!doctype html>
> <script>
>     var el = document.createElement("input");
>     el.setAttribute("size", "-1");
>     alert(el.size);
> 
>     el.removeAttribute("size");
>     alert(el.size);
> </script>

Yes. A case roughly like the above, but the above case is fine. The bug will happen if the initial size is valid, so "10" instead of "-1".

With theist last patch we will get 10 for el.size but we should get 20. And the element will also be the wrong size.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.