Remove blacklist on .innerHTML and .outerHTML

third_party/WebKit/Source/web/WebFrameSerializerImpl.cpp

 /*
  * Copyright (C) 2009 Google Inc. All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions are
  * met:
  *
  *     * Redistributions of source code must retain the above copyright
  * notice, this list of conditions and the following disclaimer.
  *     * Redistributions in binary form must reproduce the above
@@ skipping 81 matching lines @@
 #include "core/html/HTMLMetaElement.h"
 #include "core/loader/DocumentLoader.h"
 #include "core/loader/FrameLoader.h"
 #include "public/platform/WebCString.h"
 #include "public/platform/WebVector.h"
 #include "web/WebLocalFrameImpl.h"
 #include "wtf/text/TextEncoding.h"
 
 namespace blink {
 
+using namespace HTMLNames;

[tkent, 2017/02/22 00:31:55]

This is unnecessary.

+
 // Maximum length of data buffer which is used to temporary save generated
 // html content data. This is a soft limit which might be passed if a very large
 // contegious string is found in the html document.
 static const unsigned dataBufferCapacity = 65536;
 
 WebFrameSerializerImpl::SerializeDomParam::SerializeDomParam(
     const KURL& url,
     const WTF::TextEncoding& textEncoding,
     Document* document)
     : url(url),
@@ skipping 246 matching lines @@
   String addedContents = postActionAfterSerializeOpenTag(element, param);
   // Complete the open tag for element when it has child/children.
   if (element->hasChildren() || param->haveAddedContentsBeforeEnd)
     result.append('>');
   // Append the added contents generate in  post action of open tag.
   result.append(addedContents);
   // Save the result to data buffer.
   saveHTMLContentToBuffer(result.toString(), param);
 }
 
+static inline bool canHaveEndTag(Element* element) {

[tkent, 2017/02/22 00:31:55]

I don't think we need to introduce new function.

+  if (!element->isHTMLElement()) {
+    return true;
+  }
+
+  return toHTMLElement(element)->shouldSerializeEndTag();
+}
+
 // Serialize end tag of an specified element.
 void WebFrameSerializerImpl::endTagToString(Element* element,
                                             SerializeDomParam* param) {
   bool needSkip;
   StringBuilder result;
   // Do pre action for end tag.
   result.append(preActionBeforeSerializeEndTag(element, param, &needSkip));
   if (needSkip)
     return;
   // Write end tag when element has child/children.
   if (element->hasChildren() || param->haveAddedContentsBeforeEnd) {
     result.append("</");
     result.append(element->nodeName().lower());
     result.append('>');
   } else {
     // Check whether we have to write end tag for empty element.
     if (param->isHTMLDocument) {
       result.append('>');
       // FIXME: This code is horribly wrong.  WebFrameSerializerImpl must die.
-      if (!element->isHTMLElement() ||
-          !toHTMLElement(element)->ieForbidsInsertHTML()) {
+      if (canHaveEndTag(element)) {
         // We need to write end tag when it is required.
         result.append("</");
         result.append(element->nodeName().lower());
         result.append('>');
       }
     } else {
       // For xml base document.
       result.append(" />");
     }
   }
@@ skipping 81 matching lines @@
     // Report empty contents for invalid URLs.
     m_client->didSerializeDataForFrame(
         WebCString(), WebFrameSerializerClient::CurrentFrameIsFinished);
   }
 
   DCHECK(m_dataBuffer.isEmpty());
   return didSerialization;
 }
 
 }  // namespace blink