[Webkit-unassigned] [Bug 129742] New: Form-association for <img> is inconsistent

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Wed Mar 5 09:52:29 PST 2014


https://bugs.webkit.org/show_bug.cgi?id=129742

           Summary: Form-association for <img> is inconsistent
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: Unspecified
               URL: data:text/html,<div id=willBeRemoved> <div> <form
                    id=f1> <input id=in1> <img id=im1> </div> <input
                    id=in3> <img id=im3> </div> <input id=in2> <img
                    id=im2> <script>var f = document.getElementById('f1');
                    var d=document.getElementById('willBeRemoved');
                    d.parentNode.removeChild(d); alert('' + f['im1'] + ','
                    + f['im2'] + ',' + f['im3']);</script>
        OS/Version: Unspecified
            Status: NEW
          Keywords: BlinkMergeCandidate
          Severity: Normal
          Priority: P2
         Component: Forms
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: ddkilzer at webkit.org
                CC: rniwa at webkit.org, tkent at chromium.org


>From <https://code.google.com/p/chromium/issues/detail?id=336317>:

Version: all (ancient WebKit bug)
OS: all

What steps will reproduce the problem?
1. Open the following URL:

data:text/html,<div id=willBeRemoved> <div> <form id=f1> <input id=in1> <img id=im1> </div> <input id=in3> <img id=im3> </div> <input id=in2> <img id=im2> <script>var f = document.getElementById('f1'); var d=document.getElementById('willBeRemoved'); d.parentNode.removeChild(d); alert('' + f['im1'] + ',' + f['im2'] + ',' + f['im3']);</script>

What is the expected output? What do you see instead?
Expected: Alert "[object HTMLImageElement],undefined,[object HTMLImageElement]" according to the standard and Firefox.
Actual: Alert "undefined,[object HTMLImageElement],undefined"

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.



More information about the webkit-unassigned mailing list