Experiment with restricting form submission with open elements.

third_party/WebKit/Source/core/html/parser/HTMLElementStack.cpp

 /*
  * Copyright (C) 2010 Google, Inc. All Rights Reserved.
  * Copyright (C) 2011 Apple Inc. All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions
  * are met:
  * 1. Redistributions of source code must retain the above copyright
  *    notice, this list of conditions and the following disclaimer.
  * 2. Redistributions in binary form must reproduce the above copyright
@@ skipping 13 matching lines @@
  * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
  */
 
 #include "core/html/parser/HTMLElementStack.h"
 
 #include "core/HTMLNames.h"
 #include "core/MathMLNames.h"
 #include "core/SVGNames.h"
 #include "core/dom/Element.h"
 #include "core/html/HTMLElement.h"
+#include "core/html/HTMLFormControlElement.h"
+#include "core/html/HTMLSelectElement.h"
 
 namespace blink {
 
 using namespace HTMLNames;
 
 namespace {
 
 inline bool isRootNode(HTMLStackItem* item) {
   return item->isDocumentFragmentNode() || item->hasTagName(htmlTag);
 }
@@ skipping 112 matching lines @@
   popCommon();
 }
 
 void HTMLElementStack::popAll() {
   m_rootNode = nullptr;
   m_headElement = nullptr;
   m_bodyElement = nullptr;
   m_stackDepth = 0;
   while (m_top) {
     Node& node = *topNode();
-    if (node.isElementNode())
+    if (node.isElementNode()) {
       toElement(node).finishParsingChildren();
+      if (isHTMLSelectElement(node))
+        toHTMLFormControlElement(node).setBlocksFormSubmission(true);
+    }
     m_top = m_top->releaseNext();
   }
 }
 
 void HTMLElementStack::pop() {
   ASSERT(!topStackItem()->hasTagName(HTMLNames::headTag));
   popCommon();
 }
 
 void HTMLElementStack::popUntil(const AtomicString& tagName) {
@@ skipping 361 matching lines @@
 #ifndef NDEBUG
 
 void HTMLElementStack::show() {
   for (ElementRecord* record = m_top.get(); record; record = record->next())
     LOG(INFO) << *record->element();
 }
 
 #endif
 
 }  // namespace blink