Per spec, "srcdoc" attribute of an <iframe> takes precedence over "src". However, existing handling of "srcdoc" in HTMLFrameElementBase::parseAttribute does not check if the attribute was set or removed. As a result, removal of "srcdoc" attribute navigates the <iframe> to "about:srcdoc" instead of URL in value of "src" attribute. WHATWG HTML: https://html.spec.whatwg.org/multipage/iframe-embed-object.html#otherwise-steps-for-iframe-or-frame-elements
Created attachment 387212 [details] Patch
The commit-queue encountered the following flaky tests while processing attachment 387212 [details]: editing/spelling/spellcheck-async-remove-frame.html bug 158401 (authors: morrita@google.com, rniwa@webkit.org, and tony@chromium.org) The commit-queue is continuing to process your patch.
Comment on attachment 387212 [details] Patch Clearing flags on attachment: 387212 Committed r254498: <https://trac.webkit.org/changeset/254498>
All reviewed patches have been landed. Closing bug.
<rdar://problem/58559565>