Bug 127285

Summary: Improve security mitigation added in webkit r94001. We missed the case where attachLine was called when we already had an inline box wrapper.
Product: WebKit Reporter: Peter Molnar <pmolnar.u-szeged>
Component: WebCore Misc.Assignee: Nobody <webkit-unassigned>
Status: RESOLVED FIXED    
Severity: Normal CC: commit-queue, esprehn+autocc, glenn, hyatt, koivisto, kondapallykalyan, rniwa, simon.fraser
Priority: P2 Keywords: BlinkMergeCandidate, InRadar
Version: 528+ (Nightly build)   
Hardware: Unspecified   
OS: Unspecified   
Attachments:
Description Flags
patch none

Description Peter Molnar 2014-01-20 04:45:49 PST 
Merged from blink: https://src.chromium.org/viewvc/blink?revision=150697&view=revision
Comment 1 Peter Molnar 2014-01-20 04:49:26 PST 
Created attachment 221647 [details]
patch
Comment 2 Brent Fulgham 2014-04-16 14:19:51 PDT 
Comment on attachment 221647 [details]
patch

r=me
Comment 3 WebKit Commit Bot 2014-04-16 14:51:24 PDT 
Comment on attachment 221647 [details]
patch

Clearing flags on attachment: 221647

Committed r167387: <http://trac.webkit.org/changeset/167387>
Comment 4 WebKit Commit Bot 2014-04-16 14:51:28 PDT 
All reviewed patches have been landed.  Closing bug.
Comment 5 David Kilzer (:ddkilzer) 2014-04-16 16:43:31 PDT 
<rdar://problem/16641230>
Comment 6 Brent Fulgham 2016-07-14 10:23:47 PDT 
*** Bug 116911 has been marked as a duplicate of this bug. ***