[Webkit-unassigned] [Bug 203969] New: Styling display with '!important' in ::-webkit-list-button crashes

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=203969

            Bug ID: 203969
           Summary: Styling display with '!important' in
                    ::-webkit-list-button crashes
           Product: WebKit
           Version: Safari 13
          Hardware: Macintosh
                OS: Unspecified
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: CSS
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: smcgruer at chromium.org

Created attachment 383061

  --> https://bugs.webkit.org/attachment.cgi?id=383061&action=review

Reproduction of bug

I was attempting to remove the blue drop-down arrow that appears when using a 'list' attribute on an <input> element, when I found that styling ::-webkit-list-button with 'display: none !important' appears to crash Safari. Removing the '!important' appears to resolve the crash (albeit it doesn't actually do what I want...)

See the attached reproduction (or the web-hosted version at https://output.jsbin.com/vuyayej/quiet); on loading it I get "A problem repeatedly occurred with ...".

I reproduced this on Browserstack Safari 12.1 on Mojave, but have also had colleagues reproduce with:

  * 13.0.3 (14608.3.10.10.1)
  * Release 95 (Safari 13.1, WebKit 14609.1.7)

It does NOT appear to reproduce on an iOS device:

  * Mozilla/5.0 (iPhone; CPU iPhone OS 13_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.4 Mobile/15E148 Safari/604.1

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20191107/c8eca01c/attachment.htm>