98187 - </font> closes <select>

Status: VERIFIED FIXED

(Core :: DOM: HTML Parser, defect, P1)

Description

[David Einstein]

From Bugzilla Helper:
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:0.9.3+)
Gecko/20010831
BuildID:    2001083103

The div tag enclosing the form seems to confuse the parser, and misplaces 
the contents of the select box.

Reproducible: Always
Steps to Reproduce:
1. Load the Page (or a testcase coming soon) 
2. look at the select box.
3.

Actual Results:  Nothing but Abington appears in the select box

Expected Results:  Lots of towns, up to and including Worcester.

It works in IE, and it appears to be correct HTML.

Comment 1

[David Einstein]

Attachment: testcase

Comment 2

[David Einstein]

removing the outermost <div> in the testcase makes it display sanely.

Comment 3

[Boris Zbarsky [:bzbarsky]]

<div> is not valid inside <option> (no tags are allowed inside <option> in
fact...).  So we see

<div><select><option><div> text </div></option> ...

and we ignore the second <div>, assume </div> applies to the first <div> and you
get the results you see.

Definitely seems like a parser problem.

Comment 4

[David Einstein]

Much the same problem happens at
http://www.xicomputer.com/products/mtoweramd2p.asp
but there it's ...<font> <option> text </option> </font>...

Comment 5

[harishd]

David: Do you have testcase for the problem ( though I couldn't see where the
problem is ) seen in http://www.xicomputer.com/products/mtoweramd2p.asp?

-->0.9.5

Comment 6

[Christopher Hoess (gone)]

Duping into bug 98645, which has a testcase.

*** This bug has been marked as a duplicate of 98645 ***

Comment 7

[Christopher Hoess (gone)]

Ah, never mind.  Reopening for David's bug on xicomputers, which is that a
</font> in <select> terminates the <select>.

Comment 8

[Christopher Hoess (gone)]

Attachment: Testcase with open <font> and <font></font> in <select>

Comment 9

[Christopher Hoess (gone)]

It looks like the </font> inside <select> closes the <font> tag open outside the
select as well as the one inside, and, in doing so, the select itself.

Comment 10

[Markus Gerstel]

Bug 6169 ?

Comment 11

[Gael Le Mignot]

The second test case works for me, Mozilla 0.9.3, Debian GNU/Linux Woody.
Can try at home (recent nightly, Debian Sid) if you want to.

The first one still show the problem.

Comment 12

[Boris Zbarsky [:bzbarsky]]

This is indeed a regression of bug 6169

Comment 13

[Boris Zbarsky [:bzbarsky]]

*** Bug 99272 has been marked as a duplicate of this bug. ***

Comment 14

[harishd]

I thought I tested this case when I landed the fix for bug 56245. Apparently, I
was wrong. Will work on it. Adding topembed keyword.

Comment 15

[Boris Zbarsky [:bzbarsky]]

*** Bug 99347 has been marked as a duplicate of this bug. ***

Comment 16

[harishd]

Attachment: patch v1.0

Comment 17

[harishd]

Added check for root tag list.

Note: Root tag list is the set of tags that cannot be crossed over when an end tag
tries to close it's matching open tag on the stack.

Comment 18

[Heikki Toivonen (remove -bugzilla when emailing directly)]

topembed -> nsbranch+

Comment 19

[Jaime Rodriguez, Jr.]

Get SR, then check it in.

Comment 20

[vidur (gone)]

Comment on attachment 49763 [details] [diff] [review]
patch v1.0

sr=vidur

Comment 21

[Heikki Toivonen (remove -bugzilla when emailing directly)]

PDT agreed that as soon as this gets sr, this gets PDT+.

Comment 22

[harishd]

FIXED.

Comment 23

[Moied]

verified fixed on build ID 20010927

Comment 24

[Boris Zbarsky [:bzbarsky]]

*** Bug 104921 has been marked as a duplicate of this bug. ***

Comment 25

[Moied]

Marking bug as verified with build ID 20011116 on win2k