[Webkit-unassigned] [Bug 129742] New: Form-association for <img> is inconsistent
bugzilla-daemon at webkit.org
bugzilla-daemon at webkit.org
Wed Mar 5 09:52:29 PST 2014
https://bugs.webkit.org/show_bug.cgi?id=129742
Summary: Form-association for <img> is inconsistent
Product: WebKit
Version: 528+ (Nightly build)
Platform: Unspecified
URL: data:text/html,<div id=willBeRemoved> <div> <form
id=f1> <input id=in1> <img id=im1> </div> <input
id=in3> <img id=im3> </div> <input id=in2> <img
id=im2> <script>var f = document.getElementById('f1');
var d=document.getElementById('willBeRemoved');
d.parentNode.removeChild(d); alert('' + f['im1'] + ','
+ f['im2'] + ',' + f['im3']);</script>
OS/Version: Unspecified
Status: NEW
Keywords: BlinkMergeCandidate
Severity: Normal
Priority: P2
Component: Forms
AssignedTo: webkit-unassigned at lists.webkit.org
ReportedBy: ddkilzer at webkit.org
CC: rniwa at webkit.org, tkent at chromium.org
>From <https://code.google.com/p/chromium/issues/detail?id=336317>:
Version: all (ancient WebKit bug)
OS: all
What steps will reproduce the problem?
1. Open the following URL:
data:text/html,<div id=willBeRemoved> <div> <form id=f1> <input id=in1> <img id=im1> </div> <input id=in3> <img id=im3> </div> <input id=in2> <img id=im2> <script>var f = document.getElementById('f1'); var d=document.getElementById('willBeRemoved'); d.parentNode.removeChild(d); alert('' + f['im1'] + ',' + f['im2'] + ',' + f['im3']);</script>
What is the expected output? What do you see instead?
Expected: Alert "[object HTMLImageElement],undefined,[object HTMLImageElement]" according to the standard and Firefox.
Actual: Alert "undefined,[object HTMLImageElement],undefined"
--
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
More information about the webkit-unassigned
mailing list