DeleteButtonController::createDeletionUI() sets CSSPropertyWebkitUserModify to CSSValueNone, which is not a valid value for user modify. Instead, it should be CSSValueReadOnly.
I ran into an ASSERT_NOT_REACHED in WebCore::Node::rendererIsEditable() when trying to add the plaintext value to unicode-bidi for 50949. After my new CSS value is added, every test using the DeleteButtonController crashed the same way.
I can't reproduce this without the new CSS value. Anyone know why?
Created attachment 88245 [details]
Comment on attachment 88245 [details]
Clearing flags on attachment: 88245
Committed r82946: <http://trac.webkit.org/changeset/82946>
All reviewed patches have been landed. Closing bug.