SVG should consider base URI when resolving fragment URIs

third_party/WebKit/Source/core/svg/SVGURIReference.h

 /*
  * Copyright (C) 2004, 2005, 2008, 2009 Nikolas Zimmermann <zimmermann@kde.org>
  * Copyright (C) 2004, 2005 Rob Buis <buis@kde.org>
  *
  * This library is free software; you can redistribute it and/or
  * modify it under the terms of the GNU Library General Public
  * License as published by the Free Software Foundation; either
  * version 2 of the License, or (at your option) any later version.
  *
  * This library is distributed in the hope that it will be useful,
@@ skipping 24 matching lines @@
     virtual ~SVGURIReference() { }
 
     bool isKnownAttribute(const QualifiedName&);
 
     static AtomicString fragmentIdentifierFromIRIString(const String&, const TreeScope&);
     static Element* targetElementFromIRIString(const String&, const TreeScope&, AtomicString* = 0, Document* = 0);
 
     static inline bool isExternalURIReference(const String& uri, const Document& document)
     {
         // Fragment-only URIs are always internal
-        if (uri.startsWith('#'))
+        if (document.baseURL() == document.url() && uri.startsWith('#'))

[fs, 2015/11/17 09:07:54]

How is this any different from just removing the startsWith(...) check
altogether?

[Shanmuga Pandi, 2015/11/17 09:15:35]

If a content does not have <base> property , then it will be treated as internal
URI and do early return, else it will be considered as external URI. 

             return false;
 
         // If the URI matches our documents URL, we're dealing with a local reference.
         KURL url = document.completeURL(uri);
         return !equalIgnoringFragmentIdentifier(url, document.url());
     }
 
     const String& hrefString() const { return m_href->currentValue()->value(); }
 
     // JS API
     SVGAnimatedString* href() const { return m_href.get(); }
 
     DECLARE_VIRTUAL_TRACE();
 
 protected:
     explicit SVGURIReference(SVGElement*);
 
 private:
     RefPtrWillBeMember<SVGAnimatedString> m_href;
 };
 
 } // namespace blink
 
 #endif // SVGURIReference_h