Remove the wrong optimization in replacing a text node with innerHTML

third_party/WebKit/Source/core/editing/serializers/Serialization.cpp

 /*
  * Copyright (C) 2004, 2005, 2006, 2007, 2008, 2009 Apple Inc. All rights
  * reserved.
  * Copyright (C) 2008, 2009, 2010, 2011 Google Inc. All rights reserved.
  * Copyright (C) 2011 Igalia S.L.
  * Copyright (C) 2011 Motorola Mobility. All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions
  * are met:
@@ skipping 695 matching lines @@
   DCHECK(container);
   ContainerNode* containerNode(container);
 
   ChildListMutationScope mutation(*containerNode);
 
   if (!fragment->firstChild()) {
     containerNode->removeChildren();
     return;
   }
 
-  // FIXME: This is wrong if containerNode->firstChild() has more than one ref!
-  if (containerNode->hasOneTextChild() && fragment->hasOneTextChild()) {
-    toText(containerNode->firstChild())
-        ->setData(toText(fragment->firstChild())->data());
-    return;
-  }
-
   // FIXME: No need to replace the child it is a text node and its contents are
   // already == text.
   if (containerNode->hasOneChild()) {
     containerNode->replaceChild(fragment, containerNode->firstChild(),
                                 exceptionState);
     return;
   }
 
   containerNode->removeChildren();
   containerNode->appendChild(fragment, exceptionState);
@@ skipping 49 matching lines @@
   textNode->appendData(textNext->data());
   if (textNext->parentNode())  // Might have been removed by mutation event.
     textNext->remove(exceptionState);
 }
 
 template class CORE_TEMPLATE_EXPORT CreateMarkupAlgorithm<EditingStrategy>;
 template class CORE_TEMPLATE_EXPORT
     CreateMarkupAlgorithm<EditingInFlatTreeStrategy>;
 
 }  // namespace blink