[Webkit-unassigned] [Bug 210166] New: Selection.getRangeAt(0) unexpectedly throw IndexSizeError even when node is removed during composition

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=210166

            Bug ID: 210166
           Summary: Selection.getRangeAt(0) unexpectedly throw
                    IndexSizeError even when node is removed during
                    composition
           Product: WebKit
           Version: Safari 13
          Hardware: iPhone / iPad
                OS: Unspecified
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: HTML Editing
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: xidorn-webkit at upsuper.org
                CC: wenson_hsieh at apple.com

Created attachment 395760

  --> https://bugs.webkit.org/attachment.cgi?id=395760&action=review

testcase

Steps to reproduce:
1. open the attached testcase on Safari on iOS
2. tap on the box (and see the soft keyboard to show up)
3. switch to Japanese keyboard
4. input several characters from the keyboard without picking anything on the word selection bar
5. click "Done" button on top of the soft keyboard

At that point, you should see the text box removed from the page.

Expected result:
The selection info text should say there is no selection (indicating selection.rangeCount is zero).

Actual result:
The selection info text says IndexSizeError (indicating selection.rangeCount is one but getRangeAt(0) throws).

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20200407/b269df7d/attachment-0001.htm>