<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>36881</bug_id>
          
          <creation_ts>2010-03-31 05:02:09 -0700</creation_ts>
          <short_desc>document.write() isn&apos;t processed immediately before DOM access</short_desc>
          <delta_ts>2010-08-16 01:51:50 -0700</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>DOM</component>
          <version>528+ (Nightly build)</version>
          <rep_platform>PC</rep_platform>
          <op_sys>All</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords></keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="Hajime Morrita">morrita</reporter>
          <assigned_to name="Nobody">webkit-unassigned</assigned_to>
          <cc>abarth</cc>
    
    <cc>ap</cc>
    
    <cc>commit-queue</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>206462</commentid>
    <comment_count>0</comment_count>
      <attachid>52152</attachid>
    <who name="Hajime Morrita">morrita</who>
    <bug_when>2010-03-31 05:02:09 -0700</bug_when>
    <thetext>Created attachment 52152
reproduce

Following results &quot;SecondFirst&quot;. The result should be &quot;FirstSecond&quot;:

document.write(&quot;&lt;div class=&apos;parent&apos; id=&apos;innerHTMLTextDom&apos;&gt;&quot;);
document.write(&quot;First&quot;);
document.getElementById(&quot;innerHTMLTextDom&quot;).innerHTML += &quot;Second&quot;;
document.write(&quot;&lt;/div&gt;&quot;);</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>206705</commentid>
    <comment_count>1</comment_count>
    <who name="Alexey Proskuryakov">ap</who>
    <bug_when>2010-03-31 13:49:44 -0700</bug_when>
    <thetext>Related to bug 8961, bug 25567, bug 36802.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>264956</commentid>
    <comment_count>2</comment_count>
    <who name="Adam Barth">abarth</who>
    <bug_when>2010-08-16 00:09:04 -0700</bug_when>
    <thetext>This is fixed on trunk, presumably when I fixed Bug 8961.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>264959</commentid>
    <comment_count>3</comment_count>
    <who name="Adam Barth">abarth</who>
    <bug_when>2010-08-16 00:17:34 -0700</bug_when>
    <thetext>ap is going to ask me to land a test for this bug.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>264962</commentid>
    <comment_count>4</comment_count>
      <attachid>64470</attachid>
    <who name="Adam Barth">abarth</who>
    <bug_when>2010-08-16 00:21:51 -0700</bug_when>
    <thetext>Created attachment 64470
Patch</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>264968</commentid>
    <comment_count>5</comment_count>
      <attachid>64470</attachid>
    <who name="Alexey Proskuryakov">ap</who>
    <bug_when>2010-08-16 00:30:51 -0700</bug_when>
    <thetext>Comment on attachment 64470
Patch

Thank you!</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>264986</commentid>
    <comment_count>6</comment_count>
      <attachid>64470</attachid>
    <who name="WebKit Commit Bot">commit-queue</who>
    <bug_when>2010-08-16 01:51:45 -0700</bug_when>
    <thetext>Comment on attachment 64470
Patch

Clearing flags on attachment: 64470

Committed r65401: &lt;http://trac.webkit.org/changeset/65401&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>264987</commentid>
    <comment_count>7</comment_count>
    <who name="WebKit Commit Bot">commit-queue</who>
    <bug_when>2010-08-16 01:51:50 -0700</bug_when>
    <thetext>All reviewed patches have been landed.  Closing bug.</thetext>
  </long_desc>
      
          <attachment
              isobsolete="0"
              ispatch="0"
              isprivate="0"
          >
            <attachid>52152</attachid>
            <date>2010-03-31 05:02:09 -0700</date>
            <delta_ts>2010-03-31 05:02:09 -0700</delta_ts>
            <desc>reproduce</desc>
            <filename>textarea.html</filename>
            <type>text/html</type>
            <size>2342</size>
            <attacher name="Hajime Morrita">morrita</attacher>
            
              <data encoding="base64">PGh0bWw+CjxoZWFkPgo8c2NyaXB0PgoKZnVuY3Rpb24gbG9nKHN0cikKewogICAgZG9jdW1lbnQu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</data>

          </attachment>
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>64470</attachid>
            <date>2010-08-16 00:21:51 -0700</date>
            <delta_ts>2010-08-16 01:51:45 -0700</delta_ts>
            <desc>Patch</desc>
            <filename>bug-36881-20100816002150.patch</filename>
            <type>text/plain</type>
            <size>1798</size>
            <attacher name="Adam Barth">abarth</attacher>
            
              <data encoding="base64">ZGlmZiAtLWdpdCBhL0xheW91dFRlc3RzL0NoYW5nZUxvZyBiL0xheW91dFRlc3RzL0NoYW5nZUxv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</data>

          </attachment>
      

    </bug>

</bugzilla>