Bug 77681

Summary: Non-matching substring attribute selectors match when generating contents
Product: WebKit Reporter: Jens O. Meiert <jens>
Component: CSSAssignee: Nobody <webkit-unassigned>
Status: NEW ---    
Severity: Normal CC: dglazkov, kling, koivisto, mikelawther, phiw2
Priority: P2    
Version: 528+ (Nightly build)   
Hardware: Macintosh Intel   
OS: OS X 10.6   
URL: http://jsbin.com/uvesad/14
Description Flags
Screenshot of jsbin.com test case none

Description Jens O. Meiert 2012-02-02 13:42:11 PST
Created attachment 125180 [details]
Screenshot of jsbin.com test case

Issue observed in Chrome 16.0.912.77 on Mac OS 10.6.8. Not reproducible in earlier WebKit builds (e.g. Safari 5.1.2).

Selectors like “[href$='foo/']:before” in conjunction with “content” declaration generate contents for all elements carrying @href, not just the ones actually matching the selector.

Example: http://jsbin.com/uvesad/14
Source: http://jsbin.com/uvesad/14/edit
Preview: <Screen shot 2012-02-02 at 1.38.04 PM.png>

(FYI: was forced to set a “Version”. Not sure 528+ is accurate.)
Comment 1 Dimitri Glazkov (Google) 2012-02-02 13:43:48 PST
looks like a recent regression?
Comment 2 Philippe Wittenbergh 2012-02-02 21:30:54 PST
Looks like a duplicate of bug 71621