[Webkit-unassigned] [Bug 96824] New: <object> elements do not get re-evaluated when its attributes have changed and has been removed from/added back into the DOM

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=96824

           Summary: <object> elements do not get re-evaluated when its
                    attributes have changed and has been removed
                    from/added back into the DOM
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: Macintosh
        OS/Version: Mac OS X 10.8
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: Plug-ins
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: jonlee at apple.com


Created an attachment (id=164224)
 --> (https://bugs.webkit.org/attachment.cgi?id=164224&action=review)
Test case

Loading a Flash movie, and then having a button that removes the object element from the DOM, changes the object's parameters to load an image, and then inserts it back, does not render an image.

According to WHATWG spec, http://www.whatwg.org/specs/web-apps/current-work/multipage/the-iframe-element.html#the-object-element

-----

Whenever one of the following conditions occur:

1. the element is created,
2. the element is popped off the stack of open elements of an HTML parser or XML parser,
3. the element is not on the stack of open elements of an HTML parser or XML parser, and it is either inserted into a document or removed from a document,
4. the element's Document changes whether it is fully active,
5. one of the element's ancestor object elements changes to or from showing its fallback content,
6. the element's classid attribute is set, changed, or removed,
7. the element's classid attribute is not present, and its data attribute is set, changed, or removed,
8. neither the element's classid attribute nor its data attribute are present, and its type attribute is set, changed, or removed,
9. the element changes from being rendered to not being rendered, or vice versa,

...the user agent must queue a task to run the following steps to (re)determine what the object element represents.

-----

Compare the attached test case with Firefox. Load the test, then click on the button. It should switch to a static image.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.