[Webkit-unassigned] [Bug 91515] SVGUseElement does not allow foreignObject as ancestor of SVGSVGElement

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Mon Sep 28 10:03:39 PDT 2020


https://bugs.webkit.org/show_bug.cgi?id=91515

Said Abou-Hallawa <sabouhallawa at apple.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |sabouhallawa at apple.com

--- Comment #3 from Said Abou-Hallawa <sabouhallawa at apple.com> ---
The above test case works in FireFox but it doe not work in WebKit or Chrome.

The foreignObject and its descendants are removed by removeDisallowedElementsFromSubtree() because foreignObjectTag is not one of the allowed tags createAllowedElementSet. But even adding it will not solve the problem because the HTML <p> element will be removed because its tag is not allowed.

To fix this we need to reimplement removeDisallowedElementsFromSubtree() and, as Nikolas mentioned above, we need to extend the cycle detection to all HTML elements in case any of them reference other files.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20200928/2140d944/attachment-0001.htm>


More information about the webkit-unassigned mailing list