[Webkit-unassigned] [Bug 203116] New: Native text substitutions interfere with HTML <datalist> options resulting in crash

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=203116

            Bug ID: 203116
           Summary: Native text substitutions interfere with HTML
                    <datalist> options resulting in crash
           Product: WebKit
           Version: Safari 13
          Hardware: Macintosh
                OS: macOS 10.14
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: Forms
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: javan at javan.us
                CC: cdumez at apple.com, wenson_hsieh at apple.com

Created attachment 381204

  --> https://bugs.webkit.org/attachment.cgi?id=381204&action=review

Minimal test case to reproduce <datalist> crash

To reproduce:

1. Open System Preferences → Keyboard → Text and add entry to replace "cat" with "Cat"
2. Open the attached datalist.html file in Safari
3. Ensure that the menu option for Edit → Substitutions → Text Replacement is selected
3. Type "cat" in the text field and wait for the "Cat" replacement overlay to appear
4. Click any option from the expanded <datalist> menu and Safari will crash


Tested on macOS 10.14.6 (18G103) with Safari 13.0.2 (14608.2.40.1.3) and Safari TP Release 94 (Safari 13.1, WebKit 14609.1.6.1). I believe this issue occurs in Safari 12.1 as well.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20191017/75d93f73/attachment.html>