Bug 36881 - document.write() isn't processed immediately before DOM access
Summary: document.write() isn't processed immediately before DOM access
Status: RESOLVED FIXED
Alias: None
Product: WebKit
Classification: Unclassified
Component: DOM (show other bugs)
Version: 528+ (Nightly build)
Hardware: PC All
: P2 Normal
Assignee: Nobody
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2010-03-31 05:02 PDT by Hajime Morrita
Modified: 2010-08-16 01:51 PDT (History)
3 users (show)

See Also:


Attachments
reproduce (2.29 KB, text/html)
2010-03-31 05:02 PDT, Hajime Morrita
no flags Details
Patch (1.76 KB, patch)
2010-08-16 00:21 PDT, Adam Barth
no flags Details | Formatted Diff | Diff

Note You need to log in before you can comment on or make changes to this bug.
Description Hajime Morrita 2010-03-31 05:02:09 PDT
Created attachment 52152 [details]
reproduce

Following results "SecondFirst". The result should be "FirstSecond":

document.write("<div class='parent' id='innerHTMLTextDom'>");
document.write("First");
document.getElementById("innerHTMLTextDom").innerHTML += "Second";
document.write("</div>");
Comment 1 Alexey Proskuryakov 2010-03-31 13:49:44 PDT
Related to bug 8961, bug 25567, bug 36802.
Comment 2 Adam Barth 2010-08-16 00:09:04 PDT
This is fixed on trunk, presumably when I fixed Bug 8961.
Comment 3 Adam Barth 2010-08-16 00:17:34 PDT
ap is going to ask me to land a test for this bug.
Comment 4 Adam Barth 2010-08-16 00:21:51 PDT
Created attachment 64470 [details]
Patch
Comment 5 Alexey Proskuryakov 2010-08-16 00:30:51 PDT
Comment on attachment 64470 [details]
Patch

Thank you!
Comment 6 WebKit Commit Bot 2010-08-16 01:51:45 PDT
Comment on attachment 64470 [details]
Patch

Clearing flags on attachment: 64470

Committed r65401: <http://trac.webkit.org/changeset/65401>
Comment 7 WebKit Commit Bot 2010-08-16 01:51:50 PDT
All reviewed patches have been landed.  Closing bug.