| Index: third_party/WebKit/Source/core/dom/Document.cpp
|
| diff --git a/third_party/WebKit/Source/core/dom/Document.cpp b/third_party/WebKit/Source/core/dom/Document.cpp
|
| index 56afe214d957c65ababa6f2a5a42eb885f51b9e1..b157a9ff63308a560064533c91ecefa16c231cfb 100644
|
| --- a/third_party/WebKit/Source/core/dom/Document.cpp
|
| +++ b/third_party/WebKit/Source/core/dom/Document.cpp
|
| @@ -702,8 +702,11 @@ PassRefPtrWillBeRawPtr<Element> Document::createElement(const AtomicString& name
|
| return nullptr;
|
| }
|
|
|
| - if (isXHTMLDocument() || isHTMLDocument())
|
| - return HTMLElementFactory::createHTMLElement(convertLocalName(name), *this, 0, false);
|
| + if (isXHTMLDocument() || isHTMLDocument()) {
|
| + auto el = HTMLElementFactory::createHTMLElement(convertLocalName(name), *this, 0, false);
|
| + el->taintElementIfFromIsolatedWorld();
|
| + return el;
|
| + }
|
|
|
| return Element::create(QualifiedName(nullAtom, name, nullAtom), this);
|
| }
|
| @@ -752,7 +755,9 @@ PassRefPtrWillBeRawPtr<Element> Document::createElementNS(const AtomicString& na
|
| if (qName == QualifiedName::null())
|
| return nullptr;
|
|
|
| - return createElement(qName, false);
|
| + auto el = createElement(qName, false);
|
| + el->taintElementIfFromIsolatedWorld();
|
| + return el;
|
| }
|
|
|
| PassRefPtrWillBeRawPtr<Element> Document::createElementNS(const AtomicString& namespaceURI, const AtomicString& qualifiedName, const AtomicString& typeExtension, ExceptionState& exceptionState)
|
|
|