Bug 102069

Summary: [Shadow DOM]: Event with both target and relatedTarget in the same tree is not stopped at Shadow boundary
Product: WebKit Reporter: Sergey G. Grekhov <sgrekhov>
Component: DOMAssignee: Nobody <webkit-unassigned>
Status: RESOLVED FIXED    
Severity: Normal CC: hayato, morrita, shinyak, webcomponents-bugzilla
Priority: P2    
Version: 528+ (Nightly build)   
Hardware: Unspecified   
OS: Unspecified   
Bug Depends on: 102681    
Bug Blocks: 103230    

Description Sergey G. Grekhov 2012-11-13 04:44:35 PST
According the Shadow Dom specification "In cases where both relatedTarget and target are part of the same shadow tree, the conforming UAs must stop events at the shadow boundary to avoid the appearance of spurious mouseover and mouseout events firing from the same node.". But in fact such events are not stopped at the Shadow boundary. 

Run the following example:

<html>
<head>
<script type="text/javascript">
function test() {
    var d = document;
    var SR = window.ShadowRoot || window.WebKitShadowRoot;    
        
    //Shadow root to play with
    var s = new SR(d.querySelector('#host'));
    
    var div1 = d.createElement('div');
    div1.setAttribute('style', 'height:40px; width:100%');
    div1.setAttribute('id', 'div1');
    s.appendChild(div1);
    
    var div2 = d.createElement('div');
    div2.setAttribute('style', 'height:40px; width:100%');
    div2.setAttribute('id', 'div2');
    s.appendChild(div2);
    
    s.addEventListener('mouseover', function(event) {
    	if (event.relatedTarget.getAttribute('id') != 'div1') {
    		alert('Wrong relatedTarget');
    	}
    }, false);
    
    d.body.addEventListener('mouseover', function(event) {
        alert('Event must be stopped at Shadow boundary!!!!');     
    }, false);
    
    var evt = document.createEvent("MouseEvents");
    evt.initMouseEvent("mouseover", true, false, window,
      0, 10, 10, 10, 10, false, false, false, false, 0, div1);
    
    div2.dispatchEvent(evt);
}
</script>
</head>
<body onload="test()">

<div id="host">
</div>

</body>
</html>

Event shouldn't buble up to document.body event listener but it bubles.
Comment 1 Hayato Ito 2012-11-15 04:01:20 PST
Thank you for the reporting. Let me take a look tomorrow.
Comment 2 Hayato Ito 2012-12-06 02:57:36 PST
http://trac.webkit.org/changeset/136818 fixed this. Closing.