Recurse the inner elements only if behavior is DescendToInnerBlocks

third_party/WebKit/Source/core/html/parser/HTMLTreeBuilder.cpp

 /*
  * Copyright (C) 2010 Google, Inc. All Rights Reserved.
  * Copyright (C) 2011, 2014 Apple Inc. All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions
  * are met:
  * 1. Redistributions of source code must retain the above copyright
  *    notice, this list of conditions and the following disclaimer.
  * 2. Redistributions in binary form must reproduce the above copyright
@@ skipping 630 matching lines @@
         if (!m_framesetOk)
             return;
         m_tree.openElements()->bodyElement()->remove(ASSERT_NO_EXCEPTION);
         m_tree.openElements()->popUntil(m_tree.openElements()->bodyElement());
         m_tree.openElements()->popHTMLBodyElement();
         ASSERT(m_tree.openElements()->top() == m_tree.openElements()->htmlElement());
         m_tree.insertHTMLElement(token);
         setInsertionMode(InFramesetMode);
         return;
     }
+    if (RuntimeEnabledFeatures::contextMenuEnabled() && (token->name() == menuitemTag || token->name() == menuTag || token->name() == hrTag)) {
+        if (m_tree.currentStackItem()->hasTagName(menuitemTag)) {
+            AtomicHTMLToken endOption(HTMLToken::EndTag, menuitemTag.localName());
+            processEndTag(&endOption);
+        }
+        if (token->name() == hrTag) {
+            processFakePEndTagIfPInButtonScope();
+            m_tree.insertSelfClosingHTMLElementDestroyingToken(token);
+            m_framesetOk = false;
+            return;
+        }
+        if (token->name() == menuTag)
+            processFakePEndTagIfPInButtonScope();
+        m_tree.insertHTMLElement(token);
+        return;
+    }
     if (token->name() == addressTag
         || token->name() == articleTag
         || token->name() == asideTag
         || token->name() == blockquoteTag
         || token->name() == centerTag
         || token->name() == detailsTag
         || token->name() == dirTag
         || token->name() == divTag
         || token->name() == dlTag
         || token->name() == fieldsetTag
@@ skipping 141 matching lines @@
         Attribute* typeAttribute = token->getAttributeItem(typeAttr);
         bool disableFrameset = !typeAttribute || !equalIgnoringCase(typeAttribute->value(), "hidden");
 
         m_tree.reconstructTheActiveFormattingElements();
         m_tree.insertSelfClosingHTMLElementDestroyingToken(token);
 
         if (disableFrameset)
             m_framesetOk = false;
         return;
     }
-    if ((RuntimeEnabledFeatures::contextMenuEnabled() && token->name() == menuitemTag)
-        || token->name() == paramTag
+    if (token->name() == paramTag
         || token->name() == sourceTag
         || token->name() == trackTag) {
         m_tree.insertSelfClosingHTMLElementDestroyingToken(token);
         return;
     }
     if (token->name() == hrTag) {
         processFakePEndTagIfPInButtonScope();
         m_tree.insertSelfClosingHTMLElementDestroyingToken(token);
         m_framesetOk = false;
         return;
@@ skipping 1063 matching lines @@
     }
     if (token->name() == brTag) {
         parseError(token);
         processFakeStartTag(brTag);
         return;
     }
     if (token->name() == templateTag) {
         processTemplateEndTag(token);
         return;
     }
+    if (RuntimeEnabledFeatures::contextMenuEnabled() && token->name() == menuitemTag) {
+        if (m_tree.currentStackItem()->hasTagName(menuitemTag)) {
+            m_tree.openElements()->pop();
+            return;
+        }
+        parseError(token);
+        return;
+    }
     processAnyOtherEndTagForInBody(token);
 }
 
 bool HTMLTreeBuilder::processCaptionEndTagForInCaption()
 {
     if (!m_tree.openElements()->inTableScope(captionTag.localName())) {
         ASSERT(isParsingFragment());
         // FIXME: parse error
         return false;
     }
@@ skipping 912 matching lines @@
     ASSERT(m_isAttached);
     // Warning, this may detach the parser. Do not do anything else after this.
     m_tree.finishedParsing();
 }
 
 void HTMLTreeBuilder::parseError(AtomicHTMLToken*)
 {
 }
 
 } // namespace blink