Bug 36881

Summary: document.write() isn't processed immediately before DOM access
Product: WebKit Reporter: Hajime Morrita <morrita>
Component: DOMAssignee: Nobody <webkit-unassigned>
Status: RESOLVED FIXED    
Severity: Normal CC: abarth, ap, commit-queue
Priority: P2    
Version: 528+ (Nightly build)   
Hardware: PC   
OS: All   
Attachments:
Description Flags
reproduce
none
Patch none

Description Hajime Morrita 2010-03-31 05:02:09 PDT
Created attachment 52152 [details]
reproduce

Following results "SecondFirst". The result should be "FirstSecond":

document.write("<div class='parent' id='innerHTMLTextDom'>");
document.write("First");
document.getElementById("innerHTMLTextDom").innerHTML += "Second";
document.write("</div>");
Comment 1 Alexey Proskuryakov 2010-03-31 13:49:44 PDT
Related to bug 8961, bug 25567, bug 36802.
Comment 2 Adam Barth 2010-08-16 00:09:04 PDT
This is fixed on trunk, presumably when I fixed Bug 8961.
Comment 3 Adam Barth 2010-08-16 00:17:34 PDT
ap is going to ask me to land a test for this bug.
Comment 4 Adam Barth 2010-08-16 00:21:51 PDT
Created attachment 64470 [details]
Patch
Comment 5 Alexey Proskuryakov 2010-08-16 00:30:51 PDT
Comment on attachment 64470 [details]
Patch

Thank you!
Comment 6 WebKit Commit Bot 2010-08-16 01:51:45 PDT
Comment on attachment 64470 [details]
Patch

Clearing flags on attachment: 64470

Committed r65401: <http://trac.webkit.org/changeset/65401>
Comment 7 WebKit Commit Bot 2010-08-16 01:51:50 PDT
All reviewed patches have been landed.  Closing bug.