Form submission with blank target is broken.

ios/web/web_state/js/resources/core.js

Index: ios/web/web_state/js/resources/core.js
diff --git a/ios/web/web_state/js/resources/core.js b/ios/web/web_state/js/resources/core.js
index f1a302f2be7fea56efd2a4f13cfcbfab761cd92f..340afe94f3090539031c1d5e690cfa0f0a0cda6a 100644
--- a/ios/web/web_state/js/resources/core.js
+++ b/ios/web/web_state/js/resources/core.js
@@ -555,18 +555,14 @@ goog.require('__crWeb.message');
     if (evt['defaultPrevented'])
       return;
 
-    var form = evt.target;
-    var targetsFrame = form.target && hasFrame_(window, form.target);
-
-    var action = form.getAttribute('action');
+    var action = evt.target.getAttribute('action');

[Eugene But (OOO till 7-30), 2017/03/30 00:59:03]

Optional nit:

JavaScript Style Guide encourages to have all ivars in the top of the function
(because hoisting moves them to the top anyways). So if you don't mind cleaning
up then, this code could be like this:

document.addEventListener('submit', function(evt) {
  var action;
  if (evt['defaultPrevented'])
    return;
  action = evt.target.getAttribute('action');

[michaeldo, 2017/03/30 06:43:28]

Done.

     // Default action is to re-submit to same page.
     if (!action)
       action = document.location.href;
     invokeOnHost_({
              'command': 'document.submit',
             'formName': __gCrWeb.common.getFormIdentifier(evt.srcElement),
-                'href': __gCrWeb['getFullyQualifiedURL'](action),
-        'targetsFrame': targetsFrame
+                'href': __gCrWeb['getFullyQualifiedURL'](action)
     });
   }, false);