| Index: third_party/WebKit/Source/core/html/parser/HTMLTreeBuilderSimulator.cpp | 
| diff --git a/third_party/WebKit/Source/core/html/parser/HTMLTreeBuilderSimulator.cpp b/third_party/WebKit/Source/core/html/parser/HTMLTreeBuilderSimulator.cpp | 
| index d23ba6139b787362ccc9bbd6358ba352763fd952..1821aad0b39d84707cae333f006e21df4a9b2375 100644 | 
| --- a/third_party/WebKit/Source/core/html/parser/HTMLTreeBuilderSimulator.cpp | 
| +++ b/third_party/WebKit/Source/core/html/parser/HTMLTreeBuilderSimulator.cpp | 
| @@ -145,6 +145,8 @@ HTMLTreeBuilderSimulator::SimulatedToken HTMLTreeBuilderSimulator::simulate( | 
| } else if (threadSafeMatch(tagName, scriptTag)) { | 
| tokenizer->setState(HTMLTokenizer::ScriptDataState); | 
| simulatedToken = ScriptStart; | 
| +      } else if (threadSafeMatch(tagName, linkTag)) { | 
| +        simulatedToken = Link; | 
| } else if (threadSafeMatch(tagName, styleTag) || | 
| threadSafeMatch(tagName, iframeTag) || | 
| threadSafeMatch(tagName, xmpTag) || | 
| @@ -176,6 +178,8 @@ HTMLTreeBuilderSimulator::SimulatedToken HTMLTreeBuilderSimulator::simulate( | 
| tokenizer->setState(HTMLTokenizer::DataState); | 
| return ScriptEnd; | 
| } | 
| +    if (threadSafeMatch(tagName, styleTag)) | 
| +      simulatedToken = StyleEnd; | 
| } | 
|  | 
| // FIXME: Also setForceNullCharacterReplacement when in text mode. | 
|  |