92530 - We mishandle "<table><tr><td><form><table><tr><td><table><span>"

Status: VERIFIED FIXED

(Core :: DOM: HTML Parser, defect, P1)

Description

[Hixie (not reading bugmail)]

STEPS TO REPRODUCE
   Look at the attachment. It has the following structure:

    <table>
     <tr>
      <td>
       <form>
        <table>
         <tr>
          <td>  
           <table>
            <span> Text </span>
            <tr>
             <td>

ACTUAL RESULTS
   In Mozilla, an anonymous cell is created to contain the <span>.

EXPECTED RESULTS
   In IE6-pre, the <span> is promoted above the cell. We do this as well if
   the <form> is not there, or if the <form> is not in a <table>, or if the
   <span> is in the table immediately inside the <form>. However the exact
   combination given above causes us to fail to promote the <span> correctly.

This broke out of Bugscape bug number 5040.

Comment 1

[Hixie (not reading bugmail)]

Attachment: Test case - there should be no red

Comment 2

[harishd]

Attachment: patch v1.1 [ Treat FORM as container if the parent is TD or TH ]

Comment 3

[Heikki Toivonen (remove -bugzilla when emailing directly)]

r=heikki

Comment 4

[harishd]

*** Bug 65148 has been marked as a duplicate of this bug. ***

Comment 5

[vidur (gone)]

sr=vidur

Comment 6

[harishd]

Fix landed on 08/07/01. Marking FIXED.

Comment 7

[harishd]

Leaving bug open due to topembed.

Comment 8

[harishd]

Fixed landed on the branch ( 08/10/01 ). Marking fixed.

Comment 9

[Moied]

Marking verified with build ID 20011116

Comment 10

[Sivakiran Tummala]

marking bug as verified