[Webkit-unassigned] [Bug 89159] [Shadow][Crash] Pressing delete key on table in Shadow DOM triggers an assert.

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=89159





--- Comment #3 from Hayato Ito <hayato at chromium.org>  2012-06-26 12:17:36 PST ---
I've filed a bug for the spec: https://www.w3.org/Bugs/Public/show_bug.cgi?id=17608

I think hoge1 and hoge2 should be contenteditable in this case. But in current WebKit implementation, we use '-user-modify' style property to judge it is contenteditable or not. So the implementation might be tricky.

'hoge1 and hoge2' should not inherit 'user-modify' in this case because there is a shadow boundary. We use 'composed shadow DOM tree' in resolving style inheritance.

So these elements must not be 'contenteditable' in current WebKit's style resolution. But it seems the 'user-modify' property of those elements became READ-WRITE. It's like 'an unexpected pass'. We should investigate further...

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.