Bug 125973

Summary: Paragraphs contains <i></i> will causing insertList to freeze the browser
Product: WebKit Reporter: Pepsin Ye <pepsin>
Component: HTML EditingAssignee: Nobody <webkit-unassigned>
Status: NEW ---    
Severity: Normal    
Priority: P2    
Version: 528+ (Nightly build)   
Hardware: Mac   
OS: OS X 10.9   

Description Pepsin Ye 2013-12-18 19:55:11 PST 
To reproduce this bug, you can simply try:

<body></body>
<script>
  document.body.contentEditable = true;
  document.body.innerHTML = "<p>Test1</p><p style='min-height:14.0px;'><i></i></p><p>Test2</p>"
  document.execCommand("SelectAll");
  document.execCommand("InsertUnorderedList");
</script>

I think it maybe caused by the function "InsertListCommand::listifyParagraph" in  InsertListCommand.cpp, the VisiblePosition judgement may have failed because there's a i tag contained in the paragraph, but I am not so sure.