Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(179)

Unified Diff: third_party/WebKit/Source/core/dom/Element.cpp

Issue 2202173004: make a hole (Closed) Base URL: https://chromium.googlesource.com/chromium/src.git@fix-xss
Patch Set: Created 4 years, 4 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View side-by-side diff with in-line comments
Download patch
« no previous file with comments | « no previous file | third_party/WebKit/Source/core/events/EventPath.cpp » ('j') | no next file with comments »
Expand Comments ('e') | Collapse Comments ('c') | Show Comments Hide Comments ('s')
Index: third_party/WebKit/Source/core/dom/Element.cpp
diff --git a/third_party/WebKit/Source/core/dom/Element.cpp b/third_party/WebKit/Source/core/dom/Element.cpp
index 9cce24f6a0f58afd4ba5c6ec0704733e4ab0c8db..5a16b74a4a50182b77d1501892c96332e0564610 100644
--- a/third_party/WebKit/Source/core/dom/Element.cpp
+++ b/third_party/WebKit/Source/core/dom/Element.cpp
@@ -2061,6 +2061,11 @@ ShadowRoot* Element::shadowRoot() const
ShadowRoot* Element::openShadowRoot() const
{
+ if (isSVGUseElement(this)) {
+ ShadowRoot* root = userAgentShadowRoot();
+ DCHECK(root);
+ return root;
+ }
ShadowRoot* root = shadowRoot();
if (!root)
return nullptr;
« no previous file with comments | « no previous file | third_party/WebKit/Source/core/events/EventPath.cpp » ('j') | no next file with comments »

Powered by Google App Engine
This is Rietveld 408576698