DeleteButtonController::createDeletionUI() sets CSSPropertyWebkitUserModify to CSSValueNone, which is not a valid value for user modify. Instead, it should be CSSValueReadOnly. I ran into an ASSERT_NOT_REACHED in WebCore::Node::rendererIsEditable() when trying to add the plaintext value to unicode-bidi for 50949. After my new CSS value is added, every test using the DeleteButtonController crashed the same way. I can't reproduce this without the new CSS value. Anyone know why?
Created attachment 88245 [details] Patch
Comment on attachment 88245 [details] Patch Clearing flags on attachment: 88245 Committed r82946: <http://trac.webkit.org/changeset/82946>
All reviewed patches have been landed. Closing bug.