DescriptionDon't over split DOM tree in CompositeEditCommand::splitTreeToNode
This patch changes CompositeEditCommand::splitTreeToNode not to split when
tree parent parameter |start| isn't descendant of |end| node parameter.
The root cause of issue 350843 is we call |positionInParentAfterNode()| with
dangling BLOCKQUOTE element which is tried to insert HTML element as result
of |splitTreeNode()|, which is called BODY element, and HR element; HR element
is child of BODY element.
BUG=350843
TEST=LayoutTests/editing/execCommand/indent-table-cell-crash.html
Committed: https://src.chromium.org/viewvc/blink?view=rev&revision=174951
Patch Set 1 : 2014-05-27T01:56:21 #
Total comments: 5
Patch Set 2 : 2014-05-27T06:26:59 #Patch Set 3 : 2014-05-28T05:18:57 #
Messages
Total messages: 9 (0 generated)
|