Form submission with blank target is broken.

ios/web/web_state/js/resources/core.js

 // Copyright 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 // This file adheres to closure-compiler conventions in order to enable
 // compilation with ADVANCED_OPTIMIZATIONS. In particular, members that are to
 // be accessed externally should be specified in this['style'] as opposed to
 // this.style because member identifiers are minified by default.
 // See http://goo.gl/FwOgy
 
@@ skipping 534 matching lines @@
     return window.getComputedStyle(element, null)['webkitTouchCallout'];
   };
 
   // Flush the message queue.
   if (__gCrWeb.message) {
     __gCrWeb.message.invokeQueues();
   }
 
   // Capture form submit actions.
   document.addEventListener('submit', function(evt) {
+    var action;
     if (evt['defaultPrevented'])
       return;
-
-    var form = evt.target;
-    var targetsFrame = form.target && hasFrame_(window, form.target);
-
-    var action = form.getAttribute('action');
+    action = evt.target.getAttribute('action');
     // Default action is to re-submit to same page.
     if (!action)
       action = document.location.href;
     invokeOnHost_({
              'command': 'document.submit',
             'formName': __gCrWeb.common.getFormIdentifier(evt.srcElement),
-                'href': __gCrWeb['getFullyQualifiedURL'](action),
-        'targetsFrame': targetsFrame
+                'href': __gCrWeb['getFullyQualifiedURL'](action)
     });
   }, false);
 
   addFormEventListeners_();
 
 }());  // End of anonymous object