In order to resolve the bug 128806, it's crucial to keep value() of HTMLTextFromControlElement's up-to-date when FrameSelection::setSelection tries to update its selection caches.
Created attachment 224294 [details] Cleanup
Turns out we don't need this change for the bug 128806 but this is probably a good refactoring anyways.
Comment on attachment 224294 [details] Cleanup Clearing flags on attachment: 224294 Committed r164183: <http://trac.webkit.org/changeset/164183>
All reviewed patches have been landed. Closing bug.