Steps to reproduce:
1) Go to <about:blank>
2) In the same tab, go to <data:text/html,%3Cinput%3E>
3) Click in the text field
4) Choose History > Back
5) Choose History > Forward
The text field is focused, but there is no caret and typing does not enter text in the field.
The code that’s supposed to restore the selection is in CachedPage::restore(). However, in TOT, CachedPage::restore() is unreachable (I verified this by removing its definition and building WebCore successfully).
bisect-builds puts the regression between r40813 and r40884. Based on my previous comment, I think it was <http://trac.webkit.org/changeset/40870>.
Created attachment 31277 [details]
Reinstate call to CachedPage::restore()
Fixed in <http://trac.webkit.org/projects/webkit/changeset/44676>.