var range = document.createRange();
throws an exception because we attempt to insert a DOCTYPE into a document fragment inside Range::processContents but it shouldn't.
This bug was found by the newly added test: LayoutTests/http/tests/w3c/dom/ranges/Range-deleteContents.html
Created attachment 261355 [details]
Comment on attachment 261355 [details]
Clearing flags on attachment: 261355
Committed r189914: <http://trac.webkit.org/changeset/189914>
All reviewed patches have been landed. Closing bug.