<font> isn't allowed to contain <form>, so the parser starts doing fixup. In the middle of the fixup the script flushes the content model. The upshot of all this is that the last <input> ends up a child of the <font> which ends up a child of the <form>. Over to parser, but I doubt we'll be changing this behavior much. Residual style fixup is tricky as it is, and this works correctly with valid HTML, so....
Assignee: form-submission → parser
Component: HTML: Form Submission → HTML: Parser
Confirming, because this is a bug, but as Boris said, it probably will not get fixed. (Maybe I should just mark this WONTFIX?)
Status: UNCONFIRMED → NEW
Ever confirmed: true
Related to, or dupe of, bug 182824 ?
*** This bug has been marked as a duplicate of 182824 ***
Status: NEW → RESOLVED
Last Resolved: 13 years ago
Resolution: --- → DUPLICATE
You need to log in before you can comment on or make changes to this bug.