2011-10-03  Ryosuke Niwa  <rniwa@webkit.org>

        REGRESSION(r94274): cloned text input loses value

        https://bugs.webkit.org/show_bug.cgi?id=69095

        Reviewed by NOBODY (OOPS!).

        The bug was caused by copyNonAttributeProperties not updating inner element text after copying

        m_valueIfDirty. Fixed the bug by calling updateInnerTextValue.

        Test: fast/forms/clone-input-with-dirty-value.html

        * html/HTMLInputElement.cpp:

        (WebCore::HTMLInputElement::copyNonAttributeProperties):

    setFormControlValueMatchesRenderer(false);

    updateInnerTextValue();

2011-10-03  Ryosuke Niwa  <rniwa@webkit.org>

        REGRESSION(r94274): cloned text input loses value

        https://bugs.webkit.org/show_bug.cgi?id=69095

        Reviewed by NOBODY (OOPS!).

        Added a regression test that clones an input element with a dirty value.

        The cloned input element should have the edited value.

        * fast/forms/clone-input-with-dirty-value-expected.txt: Added.

        * fast/forms/clone-input-with-dirty-value.html: Added.

This tests cloning an input element with an edited value. The cloned input element should retain the edited value and you should see PASSED blow.

PASSED

<!DOCTYPE HTML>

<html>

<body>

<p>This tests cloning an input element with an edited value.

The cloned input element should retain the edited value and you should see PASSED blow.</p>

<pre id="log"></pre>

<div><input id="test" title="1" type="text" value="FAIL"></div>

<script type="text/javascript">

if (window.layoutTestController)

    layoutTestController.dumpAsText();

var test = document.getElementById('test');

test.value = 'PASS';

var x = test.offsetLeft; // Force layout

var clone = test.cloneNode(true);

test.parentNode.appendChild(clone);

test.value = '';

clone.focus();

clone.selectionStart = clone.selectionEnd = clone.value.length;

document.execCommand('InsertText', false, 'ED');

document.getElementById('log').textContent = clone.value;

</script>

</body>

</html>