nsHTMLAnonymousUtils violates layout invariants

NEW
Unassigned

Status

()

--
critical
10 years ago
9 years ago

People

(Reporter: bzbarsky, Unassigned)

Tracking

Trunk
x86
macOS
Points:
---
Bug Flags:
blocking1.9.2 -
wanted1.9.2 -

Firefox Tracking Flags

(Not tracked)

Details

In particular, it calls nsIMutationObserver methods and passes native anonymous content to them.  This is bad.  We've hacked around it in the frame constructor for now, but it's _very_ easy for crashes to be reintroduced if this code stays as it is.
Flags: wanted1.9.2?
Flags: wanted1.9.2?
Flags: wanted1.9.2-
Flags: blocking1.9.2-
You need to log in before you can comment on or make changes to this bug.