[Webkit-unassigned] [Bug 215622] New: iOS 14 Regression: delegatesFocus causes WebKit to crash

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=215622

            Bug ID: 215622
           Summary: iOS 14 Regression: delegatesFocus causes WebKit to
                    crash
           Product: WebKit
           Version: Safari Technology Preview
          Hardware: All
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: DOM
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: ldebeasi at gmail.com

Created attachment 406804

  --> https://bugs.webkit.org/attachment.cgi?id=406804&action=review

Code Reproduction

As of iOS 14 beta 5 and STP 112, clicking an element that has delegatesFocus set on its shadow root causes WebKit to crash. This only happens when there is no element inside of the component to forward focus to. Adding a focusable element, such as an input, fixes the issue.

Steps to reproduce:

1. Open attached reproduction file on a device running iOS 14 beta 5 or STP 112.
2. Click/Tap the "Clicking me will cause a crash" text.
3. Notice that the browser reloads. Clicking again gives the "A problem repeatedly occurred" error.
4. Click/Tap the "Clicking me will NOT cause a crash" text.
5. Notice that the browser does NOT reload. This is because there is an input that delegatesFocus can forward focus to.

Expected Behavior:

I would expect that WebKit does not crash when clicking an element with delegatesFocus.

Actual Behavior:

WebKit crashes when clicking an element with delegatesFocus.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20200818/03320c7f/attachment-0001.htm>