Selection should be updated after node is moved to another document

Source/core/dom/Document.cpp

 /*
  * Copyright (C) 1999 Lars Knoll (knoll@kde.org)
  *           (C) 1999 Antti Koivisto (koivisto@kde.org)
  *           (C) 2001 Dirk Mueller (mueller@kde.org)
  *           (C) 2006 Alexey Proskuryakov (ap@webkit.org)
  * Copyright (C) 2004, 2005, 2006, 2007, 2008, 2009, 2011, 2012 Apple Inc. All rights reserved.
  * Copyright (C) 2008, 2009 Torch Mobile Inc. All rights reserved. (http://www.torchmobile.com/)
  * Copyright (C) 2008, 2009, 2011, 2012 Google Inc. All rights reserved.
  * Copyright (C) 2010 Nokia Corporation and/or its subsidiary(-ies)
  * Copyright (C) Research In Motion Limited 2010-2011. All rights reserved.
@@ skipping 3719 matching lines @@
     if (!m_ranges.isEmpty()) {
         AttachedRangeSet::const_iterator end = m_ranges.end();
         for (AttachedRangeSet::const_iterator it = m_ranges.begin(); it != end; ++it)
             (*it)->nodeChildrenChanged(container);
     }
 }
 
 void Document::updateRangesAfterNodeMovedToAnotherDocument(const Node& node)
 {
     ASSERT(node.document() != this);
-    if (m_ranges.isEmpty())
-        return;
-    AttachedRangeSet ranges = m_ranges;
-    AttachedRangeSet::const_iterator end = ranges.end();
-    for (AttachedRangeSet::const_iterator it = ranges.begin(); it != end; ++it)
-        (*it)->updateOwnerDocumentIfNeeded();
+    if (!m_ranges.isEmpty()) {
+        AttachedRangeSet ranges = m_ranges;
+        AttachedRangeSet::const_iterator end = ranges.end();
+        for (AttachedRangeSet::const_iterator it = ranges.begin(); it != end; ++it)
+            (*it)->updateOwnerDocumentIfNeeded();
+    }
+
+    if (LocalFrame* frame = this->frame()) {
+        if (!frame->selection().isNone()) {

[yosin_UTC9, 2014/06/27 01:39:24]

FrameSelection::firstRange() returns faked Range object, updating it doesn't
affect selection boundary points. We know this is confusion but we have it for
DOM Selection API compatibility.

We may want to have FrameSelection::ensureOwnerDocument(), which updates |base|,
|extent| member variables in FrameSelection::m_selection.

Here is sketch:
FrameSelection::validateOwnerDocument() {
  ASSERT(m_frame);
  if (m_selection.isNone())
     return;
  const Position base = m_selection.base();
  const Position extent = m_seleciton.extent();
  bool isBaseValid = base.document() == m_frame->document();
  bool isExtentValid = base.document() == m_frame->document();
  if (isBaseValid && isExtentValid)
     return;
  if (isBaseValid) {
    setSelection(VisibleSelection(base, m_selection.affiniy()), DoNotSetFocus);
    return;
  }
  if (isExtentValid) {
    setSelection(VisibleSelection(extent, m_selection.affiniy()),
DoNotSetFocus);
    return;
  }
  // Both boundary points aren't in this selection.
  setSelection(VisibleSelection(), DoNotSetFocus);
}

+            RefPtrWillBeRawPtr<Range> range = frame->selection().firstRange();
+            range->updateOwnerDocumentIfNeeded();
+            frame->selection().setSelection(VisibleSelection(range.get()));
+        }
+    }
 }
 
 void Document::nodeChildrenWillBeRemoved(ContainerNode& container)
 {
     NoEventDispatchAssertion assertNoEventDispatch;
     if (!m_ranges.isEmpty()) {
         AttachedRangeSet::const_iterator end = m_ranges.end();
         for (AttachedRangeSet::const_iterator it = m_ranges.begin(); it != end; ++it)
             (*it)->nodeChildrenWillBeRemoved(container);
     }
@@ skipping 2079 matching lines @@
     visitor->trace(m_compositorPendingAnimations);
     visitor->trace(m_contextDocument);
     visitor->registerWeakMembers<Document, &Document::clearWeakMembers>(this);
     DocumentSupplementable::trace(visitor);
     TreeScope::trace(visitor);
     ContainerNode::trace(visitor);
     ExecutionContext::trace(visitor);
 }
 
 } // namespace WebCore