nsHTMLAnonymousUtils violates layout invariants

NEW
Unassigned

Status

()

Core
Editor
--
critical
9 years ago
9 years ago

People

(Reporter: bz, Unassigned)

Tracking

Trunk
x86
Mac OS X
Points:
---
Bug Flags:
blocking1.9.2 -
wanted1.9.2 -

Firefox Tracking Flags

(Not tracked)

Details

In particular, it calls nsIMutationObserver methods and passes native anonymous content to them.  This is bad.  We've hacked around it in the frame constructor for now, but it's _very_ easy for crashes to be reintroduced if this code stays as it is.
Flags: wanted1.9.2?
Flags: wanted1.9.2?
Flags: wanted1.9.2-
Flags: blocking1.9.2-
You need to log in before you can comment on or make changes to this bug.