Fix frameset within fragment asserts in HTMLTreeBuilder

Fix frameset within fragment asserts in HTMLTreeBuilder

The HTMLTreeBuilder does not expect a frameset within a fragment
in the "in body" insertion mode. It seems like this is not
specifically disallowed in the spec, event though there are
other cases where the algorithm aborts here due to parsing a
fragment.

https://html.spec.whatwg.org/multipage/syntax.html#parsing-main-inbody

BUG=636057
Committed: https://crrev.com/681c95bfedb5ee83897f8a0d4104c91049ba16f6
Cr-Commit-Position: refs/heads/master@{#411945}

[Charlie Harrison, 2016-08-12 02:02:27]

The CQ bit was checked by csharrison@chromium.org to run a CQ dry run

[commit-bot: I haz the power, 2016-08-12 02:02:58]

Dry run: CQ is trying da patch. Follow status at
 
https://chromium-cq-status.appspot.com/v2/patch-status/codereview.chromium.or...

[commit-bot: I haz the power, 2016-08-12 03:18:31]

The CQ bit was unchecked by commit-bot@chromium.org

[commit-bot: I haz the power, 2016-08-12 03:18:32]

Dry run: Try jobs failed on following builders:
  win_chromium_rel_ng on master.tryserver.chromium.win (JOB_FAILED,
http://build.chromium.org/p/tryserver.chromium.win/builders/win_chromium_rel_...)

[Charlie Harrison, 2016-08-12 14:45:34]

The CQ bit was checked by csharrison@chromium.org to run a CQ dry run

[commit-bot: I haz the power, 2016-08-12 14:45:47]

Dry run: CQ is trying da patch. Follow status at
 
https://chromium-cq-status.appspot.com/v2/patch-status/codereview.chromium.or...

[Charlie Harrison, 2016-08-12 15:01:34]

Description was changed from

==========
[test] frameSetOk changes in tree builder

BUG=636057
==========

to

==========
Fix frameset within fragment asserts in HTMLTreeBuilder

The HTMLTreeBuilder does not expect a frameset within a fragment
in the "in body" insertion mode. It seems like this is not
specifically disallowed in the spec, event though there are
other cases where the algorithm aborts here due to parsing a
fragment.

https://html.spec.whatwg.org/multipage/syntax.html#parsing-main-inbody

BUG=636057
==========

[Charlie Harrison, 2016-08-12 15:04:08]

csharrison@chromium.org changed reviewers:
+ kouhei@chromium.org

[Charlie Harrison, 2016-08-12 15:04:09]

Reading the spec, "(fragment case)" is after cases where we *must* be in
fragment case to be true. However, from my reading it does not mean that that is
the *only* time in will be true.

So parsing the fragment: <p><frameset> should properly unwind the p and
(implicit) body tag.

[commit-bot: I haz the power, 2016-08-12 18:02:53]

The CQ bit was unchecked by commit-bot@chromium.org

[commit-bot: I haz the power, 2016-08-12 18:02:54]

Dry run: This issue passed the CQ dry run.

[kouhei (in TOK), 2016-08-15 05:22:11]

The CQ bit was checked by kouhei@chromium.org

[kouhei (in TOK), 2016-08-15 05:22:12]

lgtm

[commit-bot: I haz the power, 2016-08-15 05:22:17]

CQ is trying da patch. Follow status at
 
https://chromium-cq-status.appspot.com/v2/patch-status/codereview.chromium.or...

[commit-bot: I haz the power, 2016-08-15 07:09:00]

Description was changed from

==========
Fix frameset within fragment asserts in HTMLTreeBuilder

The HTMLTreeBuilder does not expect a frameset within a fragment
in the "in body" insertion mode. It seems like this is not
specifically disallowed in the spec, event though there are
other cases where the algorithm aborts here due to parsing a
fragment.

https://html.spec.whatwg.org/multipage/syntax.html#parsing-main-inbody

BUG=636057
==========

to

==========
Fix frameset within fragment asserts in HTMLTreeBuilder

The HTMLTreeBuilder does not expect a frameset within a fragment
in the "in body" insertion mode. It seems like this is not
specifically disallowed in the spec, event though there are
other cases where the algorithm aborts here due to parsing a
fragment.

https://html.spec.whatwg.org/multipage/syntax.html#parsing-main-inbody

BUG=636057
==========

[commit-bot: I haz the power, 2016-08-15 07:09:01]

Committed patchset #2 (id:20001)

[commit-bot: I haz the power, 2016-08-15 07:11:14]

Description was changed from

==========
Fix frameset within fragment asserts in HTMLTreeBuilder

The HTMLTreeBuilder does not expect a frameset within a fragment
in the "in body" insertion mode. It seems like this is not
specifically disallowed in the spec, event though there are
other cases where the algorithm aborts here due to parsing a
fragment.

https://html.spec.whatwg.org/multipage/syntax.html#parsing-main-inbody

BUG=636057
==========

to

==========
Fix frameset within fragment asserts in HTMLTreeBuilder

The HTMLTreeBuilder does not expect a frameset within a fragment
in the "in body" insertion mode. It seems like this is not
specifically disallowed in the spec, event though there are
other cases where the algorithm aborts here due to parsing a
fragment.

https://html.spec.whatwg.org/multipage/syntax.html#parsing-main-inbody

BUG=636057

Committed: https://crrev.com/681c95bfedb5ee83897f8a0d4104c91049ba16f6
Cr-Commit-Position: refs/heads/master@{#411945}
==========

[commit-bot: I haz the power, 2016-08-15 07:11:15]

Patchset 2 (id:??) landed as
https://crrev.com/681c95bfedb5ee83897f8a0d4104c91049ba16f6
Cr-Commit-Position: refs/heads/master@{#411945}