Per spec, "srcdoc" attribute of an <iframe> takes precedence over "src".
However, existing handling of "srcdoc" in HTMLFrameElementBase::parseAttribute does not check if the attribute was set or removed.
As a result, removal of "srcdoc" attribute navigates the <iframe> to "about:srcdoc" instead of URL in value of "src" attribute.
WHATWG HTML: https://html.spec.whatwg.org/multipage/iframe-embed-object.html#otherwise-steps-for-iframe-or-frame-elements
Created attachment 387212 [details]
The commit-queue encountered the following flaky tests while processing attachment 387212 [details]:
editing/spelling/spellcheck-async-remove-frame.html bug 158401 (authors: firstname.lastname@example.org, email@example.com, and firstname.lastname@example.org)
The commit-queue is continuing to process your patch.
Comment on attachment 387212 [details]
Clearing flags on attachment: 387212
Committed r254498: <https://trac.webkit.org/changeset/254498>
All reviewed patches have been landed. Closing bug.