Summary: Ampersand (&) characters appear in the right hand side of some of the rows in the contacts list in Gmail. Steps to reproduce: Note: this is not 100% reproducible. 1) Launch Safari w/TOT WebKit. 2) Log in to your Gmail account. 3) Choose Contacts > All Contacts. Expected: No ampersands on the right hand side of the contacts table. Actual: Every 12th row or so there is an ampersand in the otherwise-empty rightmost column of the contacts table. Regression: This is a regression from shipping WebKit. Notes: CC:ing Alexey because regularly-distributed ampersands smell a little like encoding errors on network packet boundaries.
Created attachment 13773 [details] HTML Source of page in question When viewing with Web Inspector on the latest nightly r20387: The bug happens around line 63. Each item in the script element about line 63 (the upper script element) gets its own table row (with td elements for the check box, name and email address). The same is said for each item in the new script element on line 63 (lower script element). When the bug comes into play is actual source of the script element (including the script tags) gets placed in an odd td element on the same table row as the last item from the upper script element. If you click to go to another part of gmail and then return to the "All Contacts" list this is not reproducible until you log back out of gmail and log back in.
Works in WebKit-CVS-2005-10-16 09-27-50 GMT.dmg, broken in WebKit-CVS-2005-10-19 02-27-00 GMT.dmg. The only tokenizer patch in that range is <http://trac.webkit.org/projects/webkit/changeset/10867>.
Created attachment 13860 [details] Reduction
Created attachment 13863 [details] Patch
Comment on attachment 13863 [details] Patch r=me
Landed in r20607.