Defer iframe JavaScript URL evaluation

Source/core/html/HTMLStyleElement.cpp

 /*
  * Copyright (C) 1999 Lars Knoll (knoll@kde.org)
  *           (C) 1999 Antti Koivisto (koivisto@kde.org)
  *           (C) 2001 Dirk Mueller (mueller@kde.org)
  * Copyright (C) 2003, 2010 Apple Inc. All rights reserved.
  *           (C) 2007 Rob Buis (buis@kde.org)
  *
  * This library is free software; you can redistribute it and/or
  * modify it under the terms of the GNU Library General Public
  * License as published by the Free Software Foundation; either
@@ skipping 192 matching lines @@
     }
 
     if (insertionPoint->inDocument()) {
         TreeScope* containingScope = containingShadowRoot();
         StyleElement::removedFromDocument(document(), this, scopingNode, containingScope ? *containingScope : insertionPoint->treeScope());
     }
 }
 
 void HTMLStyleElement::didNotifySubtreeInsertionsToDocument()
 {
+    if (!inDocument())
+        return;

[esprehn, 2014/04/02 19:33:31]

This is impossible, we only call this if you're in the document:

https://code.google.com/p/chromium/codesearch#chromium/src/third_party/WebKit...

     StyleElement::processStyleSheet(document(), this);
 }
 
 void HTMLStyleElement::childrenChanged(bool changedByParser, Node* beforeChange, Node* afterChange, int childCountDelta)
 {
     HTMLElement::childrenChanged(changedByParser, beforeChange, afterChange, childCountDelta);
     StyleElement::childrenChanged(this);
 }
 
 const AtomicString& HTMLStyleElement::media() const
@@ skipping 58 matching lines @@
     return m_sheet->disabled();
 }
 
 void HTMLStyleElement::setDisabled(bool setDisabled)
 {
     if (CSSStyleSheet* styleSheet = sheet())
         styleSheet->setDisabled(setDisabled);
 }
 
 }