Created attachment 48771 [details] Pressing delete would normally delete the image. Instead, it locks up the browser The browser would completely lock up, then crash, if the user selected an image from the blogger editor, and then tried to delete it by pressing delete. I was able to reproduce this bug twice. It works perfectly in Safari, only fails in the nightly build of webkit.
Could you please attach a crash log? Please see <http://webkit.org/quality/crashlogs.html> for instructions.
Created attachment 48784 [details] Crash report
Looks like infinite recursion in getInlineBoxAndOffset().
<rdar://problem/7651935>
Created attachment 49348 [details] Patch
Committed revision 55179.