Skip to content

Commit

Permalink
Browse files Browse the repository at this point in the history
[cgt] (2) Fix an infinite loop in parser: <select><input>, <select><k…
…eygen>, and <select><textarea> when setting innerHTML on a <select>. Thanks to gsnedders for catching this.

git-svn-id: http://svn.whatwg.org/webapps@3538 340c8d12-0b0e-0410-8428-c7bf67bfef74
  • Loading branch information
Hixie committed Aug 4, 2009
1 parent 5a7bf59 commit 492f449
Show file tree
Hide file tree
Showing 2 changed files with 21 additions and 4 deletions.
12 changes: 10 additions & 2 deletions index
Expand Up @@ -64702,8 +64702,16 @@ document.body.appendChild(text);

<dt>A start tag whose tag name is one of: "input", "keygen", "textarea"</dt>
<dd>
<p><a href=#parse-error>Parse error</a>. Act as if an end tag with the tag
name "select" had been seen, and reprocess the token.</p>

<p><a href=#parse-error>Parse error</a>.</p>

<p>If the <a href=#stack-of-open-elements>stack of open elements</a> does not <a href=#has-an-element-in-table-scope title="has an element in table scope">have an element in table
scope</a> with the same tag name as the token, ignore the
token. (<a href=#fragment-case>fragment case</a>)</p>

<p>Otherwise, act as if an end tag with the tag name "select" had
been seen, and reprocess the token.</p>

</dd>

<dt>A start tag token whose tag name is "script"</dt>
Expand Down
13 changes: 11 additions & 2 deletions source
Expand Up @@ -79299,8 +79299,17 @@ document.body.appendChild(text);

<dt>A start tag whose tag name is one of: "input", "keygen", "textarea"</dt>
<dd>
<p><span>Parse error</span>. Act as if an end tag with the tag
name "select" had been seen, and reprocess the token.</p>

<p><span>Parse error</span>.</p>

<p>If the <span>stack of open elements</span> does not <span
title="has an element in table scope">have an element in table
scope</span> with the same tag name as the token, ignore the
token. (<span>fragment case</span>)</p>

<p>Otherwise, act as if an end tag with the tag name "select" had
been seen, and reprocess the token.</p>

</dd>

<dt>A start tag token whose tag name is "script"</dt>
Expand Down

0 comments on commit 492f449

Please sign in to comment.