Experiment with restricting form submission with open elements.

third_party/WebKit/Source/core/html/parser/HTMLTreeBuilder.cpp

 /*
  * Copyright (C) 2010 Google, Inc. All Rights Reserved.
  * Copyright (C) 2011, 2014 Apple Inc. All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions
  * are met:
  * 1. Redistributions of source code must retain the above copyright
  *    notice, this list of conditions and the following disclaimer.
  * 2. Redistributions in binary form must reproduce the above copyright
@@ skipping 19 matching lines @@
 #include "core/HTMLNames.h"
 #include "core/MathMLNames.h"
 #include "core/SVGNames.h"
 #include "core/XLinkNames.h"
 #include "core/XMLNSNames.h"
 #include "core/XMLNames.h"
 #include "core/dom/Document.h"
 #include "core/dom/DocumentFragment.h"
 #include "core/dom/ElementTraversal.h"
 #include "core/frame/UseCounter.h"
+#include "core/html/HTMLFormControlElement.h"
 #include "core/html/HTMLFormElement.h"
 #include "core/html/HTMLTemplateElement.h"
 #include "core/html/parser/AtomicHTMLToken.h"
 #include "core/html/parser/HTMLDocumentParser.h"
 #include "core/html/parser/HTMLParserIdioms.h"
 #include "core/html/parser/HTMLStackItem.h"
 #include "core/html/parser/HTMLToken.h"
 #include "core/html/parser/HTMLTokenizer.h"
 #include "platform/text/PlatformLocale.h"
 #include "wtf/text/CharacterNames.h"
@@ skipping 2373 matching lines @@
       if (m_tree.currentNode() != m_tree.openElements()->rootNode())
         parseError(token);
       if (!m_templateInsertionModes.isEmpty() &&
           processEndOfFileForInTemplateContents(token))
         return;
       break;
     case InTableTextMode:
       defaultForInTableText();
       processEndOfFile(token);
       return;
-    case TextMode:
+    case TextMode: {
       parseError(token);
       if (m_tree.currentStackItem()->hasTagName(scriptTag)) {
         // Mark the script element as "already started".
         DVLOG(1) << "Not implemented.";
       }
+      Element* el = m_tree.openElements()->top();
+      if (isHTMLTextAreaElement(el))
+        toHTMLFormControlElement(el)->setBlocksFormSubmission(true);
       m_tree.openElements()->pop();
       ASSERT(m_originalInsertionMode != TextMode);
       setInsertionMode(m_originalInsertionMode);
       processEndOfFile(token);
       return;
+    }
     case TemplateContentsMode:
       if (processEndOfFileForInTemplateContents(token))
         return;
       break;
   }
   m_tree.processEndOfFile();
 }
 
 void HTMLTreeBuilder::defaultForInitial() {
   DVLOG(1) << "Not implemented.";
@@ skipping 299 matching lines @@
     DEFINE_STRINGIFY(AfterFramesetMode)
     DEFINE_STRINGIFY(AfterAfterBodyMode)
     DEFINE_STRINGIFY(AfterAfterFramesetMode)
 #undef DEFINE_STRINGIFY
   }
   return "<unknown>";
 }
 #endif
 
 }  // namespace blink