Like bug 387460 but for text.
Priority: -- → P1
Summary: Notify on text changes before firing mutation events → [FIX]Notify on text changes before firing mutation events
Target Milestone: --- → mozilla1.9 M8
Comment on attachment 279064 [details] [diff] [review] Fix Requesting approvals. This is a quite safe fix that makes sure we don't send incorrect notifications.
Attachment #279064 - Flags: approval1.9? → approval1.9+
Comment on attachment 279064 [details] [diff] [review] Fix approved for 22.214.171.124 and 126.96.36.199, a=dveditz for release-drivers
Fix landed on trunk (per request from Damon). Marking bug FIXED.
Status: NEW → RESOLVED
Last Resolved: 12 years ago
Resolution: --- → FIXED
I tried to come up with a testcase that crashes when using DOMCharacterDataModified on the branch, but I didn't succeed, so I can't verify this.
Whiteboard: [sg:moderate?] possibly exploitable → [sg:moderate?] possibly exploitable, [need testcase]
Any further luck on a test case?
Component: DOM → DOM: Core & HTML
Product: Core → Core
You need to log in before you can comment on or make changes to this bug.