[Webkit-unassigned] [Bug 204332] Nullptr crash in Node::setTextContent via Document::setTitle if title element is removed before setTextContent call.

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Mon Nov 18 17:33:40 PST 2019


https://bugs.webkit.org/show_bug.cgi?id=204332

--- Comment #7 from Ryosuke Niwa <rniwa at webkit.org> ---
I guess one thing we should check is what other browsers do. Do they set the value of title element despite of the fact they're no longer in the document?

What do they do if they insert the removed element into a new document (e.g. into an iframe's contentDocument).

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20191119/c9d62720/attachment.htm>


More information about the webkit-unassigned mailing list