Block animation of the SVGScriptElement

third_party/WebKit/Source/core/svg/SVGAnimateElement.cpp

 /*
  * Copyright (C) 2004, 2005 Nikolas Zimmermann <zimmermann@kde.org>
  * Copyright (C) 2004, 2005, 2006 Rob Buis <buis@kde.org>
  * Copyright (C) 2008 Apple Inc. All rights reserved.
  * Copyright (C) Research In Motion Limited 2011. All rights reserved.
  *
  * This library is free software; you can redistribute it and/or
  * modify it under the terms of the GNU Library General Public
  * License as published by the Free Software Foundation; either
  * version 2 of the License, or (at your option) any later version.
@@ skipping 175 matching lines @@
     if (m_type == AnimatedTransformList) {
       m_type = AnimatedUnknown;
       m_cssPropertyId = CSSPropertyInvalid;
     }
   } else {
     m_type = SVGElement::animatedPropertyTypeForCSSAttribute(attributeName());
     m_cssPropertyId = m_type != AnimatedUnknown
                           ? cssPropertyID(attributeName().localName())
                           : CSSPropertyInvalid;
   }
+  // Blacklist <script> targets here for now to prevent unpleasantries. This
+  // also disallows the perfectly "valid" animation of 'className' on said
+  // element. If SVGScriptElement.href is transitioned off of SVGAnimatedHref,
+  // this can be removed.
+  if (isSVGScriptElement(*targetElement())) {
+    m_type = AnimatedUnknown;
+    m_cssPropertyId = CSSPropertyInvalid;
+  }
   DCHECK(m_type != AnimatedPoint && m_type != AnimatedStringList &&
          m_type != AnimatedTransform && m_type != AnimatedTransformList);
 }
 
 void SVGAnimateElement::clearTargetProperty() {
   m_targetProperty = nullptr;
   m_type = AnimatedUnknown;
   m_cssPropertyId = CSSPropertyInvalid;
 }
 
@@ skipping 408 matching lines @@
 DEFINE_TRACE(SVGAnimateElement) {
   visitor->trace(m_fromProperty);
   visitor->trace(m_toProperty);
   visitor->trace(m_toAtEndOfDurationProperty);
   visitor->trace(m_animatedValue);
   visitor->trace(m_targetProperty);
   SVGAnimationElement::trace(visitor);
 }
 
 }  // namespace blink