DOMHTMLInputElement::replaceCharactersInRange() is stubbed.
Created attachment 43202 [details] patch
Comment on attachment 43202 [details] patch > + ASSERT(m_element && m_element->hasTagName(inputTag)); Please split into two separate assertions.
I made Dan's change. Landed in r51094.