[Webkit-unassigned] [Bug 88685] New: REGRESSION: Form hidden element values being restored incorrectly for dynamically generated content

Fri Jun 8 13:40:34 PDT 2012

https://bugs.webkit.org/show_bug.cgi?id=88685

           Summary: REGRESSION: Form hidden element values being restored
                    incorrectly for dynamically generated content
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: All
        OS/Version: All
            Status: UNCONFIRMED
          Severity: Normal
          Priority: P2
         Component: Forms
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: priyajeet.hora at gmail.com

Created an attachment (id=146641)
 --> (https://bugs.webkit.org/attachment.cgi?id=146641&action=review)
testcase

Upstream bug: http://code.google.com/p/chromium/issues/detail?id=131645
As mentioned in the above bug, regression likely caused by http://trac.webkit.org/changeset/106388

Copying from the above bug:

index.html (attached):

<html>
<body>
<form method="POST" action="index2.html" >
<input type="hidden" id="one" name="one" value="one" />
<input type="submit" value="submit" />
</form>
</body>
</html>

index2.html (attached):

just an empty file, does nothing.

Steps:

1] Open index.html in the browser, inspect the form and you will see the above structure.
2] Submit the form and remain on this index2 page.
3] In an editor, edit the index.html file as follows to simulate a server side change of dynamic content

<html>
<body>
<form method="POST" action="index2.html" >
<input type="hidden" id="one" name="one" value="two" />
<input type="submit" value="submit" />
</form>
</body>
</html>

Notice how I re-used the name and id, but the value is changed by the server

4] Press the browser back button
5] inspect the form again in web inspector as well as the response in the network tab

What is the expected result?

<input type="hidden" id="one" name="one" value="two" />

What happens instead?

<input type="hidden" id="one" name="one" value="one" />

6] Try the same in Chrome 18 or with autocomplete=off in the form and it works as expected

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.