Please see reduction below. This issue is a regression caused by http://bugs.webkit.org/show_bug.cgi?id=11866. <html> <head> <script language="javascript"> function showForm() { var frm = document.getElementById("frmChangeContent"); frm.NavigationTarget.value = "Jake"; alert(frm.innerHTML); } </script> </head> <body> <FORM action="" method=POST id="frmChangeContent" name="frmChangeContent"> <input type="hidden" id="NavigationTarget" name="NavigationTarget"> </FORM> <input type = "button" value="Show Form innerHTML" onclick = "showForm()"> </body> </html>
Created attachment 13712 [details] Test case from Comment #0
Does this affect a real-world site?
(In reply to comment #2) > Does this affect a real-world site? Yes, see Bug 11866 Comment #10.
Committed revision 20440
<rdar://problem/5080428>