When constructing a new document using document.implementation.createHTMLDocument and setting innerHTML of the body of that new document with a string of HTML content that has sibling forms, the second form ends up being a child of the first form. This is something I've only ever encountered on iOS8 Safari (has been tested all the way down to iOS4.2, Android 2.1, Firefox 4, etc without any issue).
Steps to Reproduce:
1. Grab minimal test case and run it on iOS8.0.(0|1|2)
2. Note that the document isn't correctly constructed, as the second form ends up becoming a child of the first form.
The document created from the string should have forms as siblings of one and other.
The document isn't correctly constructed, as the second form ends up becoming a child of the first form.
iOS8 (12A365) and newer
A minimal test case is attached.
Created attachment 239090 [details]
Minimal test case
This broke a security-related patch in jQuery:
We had to back it out because it broke Safari 8.
This looks like https://bugs.webkit.org/show_bug.cgi?id=139561
*** This bug has been marked as a duplicate of bug 139561 ***