INPUT/TEXTAREA elements: Dispatch 'change' event even if a user-edit value is overwritten by JS

third_party/WebKit/Source/core/html/HTMLTextFormControlElement.cpp

 /*
  * Copyright (C) 1999 Lars Knoll (knoll@kde.org)
  *           (C) 1999 Antti Koivisto (koivisto@kde.org)
  *           (C) 2001 Dirk Mueller (mueller@kde.org)
  * Copyright (C) 2004, 2005, 2006, 2007 Apple Inc. All rights reserved.
  *           (C) 2006 Alexey Proskuryakov (ap@nypop.com)
  *
  * This library is free software; you can redistribute it and/or
  * modify it under the terms of the GNU Library General Public
  * License as published by the Free Software Foundation; either
@@ skipping 198 matching lines @@
 }
 
 void HTMLTextFormControlElement::setChangedSinceLastFormControlChangeEvent(
     bool changed) {
   m_wasChangedSinceLastFormControlChangeEvent = changed;
 }
 
 void HTMLTextFormControlElement::setFocused(bool flag) {
   HTMLFormControlElementWithState::setFocused(flag);
 
-  if (!flag && wasChangedSinceLastFormControlChangeEvent())
-    dispatchFormControlChangeEvent();
+  if (!flag) {
+    if (wasChangedSinceLastFormControlChangeEvent()) {
+      dispatchFormControlChangeEvent();
+    } else {
+      // |value| IDL attribute setter haven't updated
+      // textAsOfLastFormControlChangeEvent while this is focused. So we
+      // synchronize now.
+      setTextAsOfLastFormControlChangeEvent(value());
+    }
+  }
 }
 
 bool HTMLTextFormControlElement::shouldDispatchFormControlChangeEvent(
     String& oldValue,
     String& newValue) {
   return !equalIgnoringNullity(oldValue, newValue);
 }
 
 void HTMLTextFormControlElement::dispatchFormControlChangeEvent() {
   String newValue = value();
@@ skipping 885 matching lines @@
 
 void HTMLTextFormControlElement::copyNonAttributePropertiesFromElement(
     const Element& source) {
   const HTMLTextFormControlElement& sourceElement =
       static_cast<const HTMLTextFormControlElement&>(source);
   m_lastChangeWasUserEdit = sourceElement.m_lastChangeWasUserEdit;
   HTMLFormControlElement::copyNonAttributePropertiesFromElement(source);
 }
 
 }  // namespace blink