NamedNodeMap::getAttributeItem() reasonably assumes that an attribute with null namespace will also have a null prefix. But we actually let one create nodes with null namespace and non-null prefix, due to a bug introduced in <http://trac.webkit.org/changeset/9639>. Patch forthcoming.
Created attachment 46727 [details] proposed fix
Comment on attachment 46727 [details] proposed fix Normally if you are comparing an atomic string to a string constant, we use an atomic string constant to make the check less expensive. I suggest we add the strings "xmlns", "http://www.w3.org/2000/xmlns/", and "xml" all to XMLNames.h alongside xmlNamespaceURI and use named constants instead of literal strings. I'm going to say review+ but I am close to a review- because I'd like us to use atomic strings when comparing with other atomic strings.
Comment on attachment 46727 [details] proposed fix Oops, I said review+ but then chose review-!
Committed <http://trac.webkit.org/changeset/53363>.
Mass moving XML DOM bugs to the "DOM" Component.