Open
Bug 1424656
Opened 8 years ago
Updated 3 years ago
Incorrect layout when IsValidSibling lies (replaced elements with table-internal display types)
Categories
(Core :: Layout: Block and Inline, enhancement, P2)
Core
Layout: Block and Inline
Tracking
()
NEW
People
(Reporter: bzbarsky, Unassigned)
Details
Attachments
(2 files)
See attached testcase. We end up in nsCSSFrameConstructor::GetInsertionPrevSibling, don't find the right nextSibling because IsValidSibling claims it's not valid, and end up doing an append, which isn't right in this case.
I marked this sec-sensitive because the testcase basically parallels those in bug 1419762 and bug 1418503 but we should unhide once we unhide those....
|
Reporter | |
Comment 1•8 years ago
|
||
|
|
Reporter | |
Comment 2•8 years ago
|
||
|
||
Updated•8 years ago
|
Keywords: sec-other
Whiteboard: [keep hidden while bug 1419762 and bug 1418503 are hidden]
|
||
Updated•8 years ago
|
Priority: -- → P2
|
|
||
Updated•8 years ago
|
Component: Layout → Layout: Block and Inline
|
||
Comment 3•7 years ago
|
||
bug 1419762 is open, can someone open this one?
|
|
||
Comment 4•7 years ago
|
||
(In reply to Emilio Cobos Álvarez [:emilio] from comment #3)
> bug 1419762 is open, can someone open this one?
Flags: needinfo?(fbraun)
|
||
Comment 5•7 years ago
|
||
Emilio tells me on IRC that (given bug 1419762 and bug 1418503 are resolved), this is only about incorrect layout - not about security.
Group: layout-core-security
Flags: needinfo?(fbraun)
Keywords: sec-other
Whiteboard: [keep hidden while bug 1419762 and bug 1418503 are hidden]
|
||
Updated•3 years ago
|
Severity: normal → S3
You need to log in
before you can comment on or make changes to this bug.
Description
•