{"push_id":545269088,"size":1,"distinct_size":1,"ref":"refs/heads/master","head":"69ece180cc6005cc36b30cba6eb808193fde2af9","before":"6fee730a95361d0f209ee02e6d64e15ceccd342c","commits":[{"sha":"69ece180cc6005cc36b30cba6eb808193fde2af9","author":{"email":"8f3a129bc83673565f000899a2a2ef93d9111231@apple.com","name":"akling@apple.com"},"message":"Element::normalizeAttributes() needs to handle arbitrary JS executing between loop iterations.\n<https://webkit.org/b/140379>\n<rdar://problem/19446901>\n\nReviewed by Benjamin Poulain.\n\nSource/WebCore:\n\nSince DOM mutation events may arise below the call to Node::normalize(),\nhave the loop in Element::normalizeAttributes() make a copy of the Attr nodes\nbeforehand, to guard against mutations.\n\nBased on a patch by Chris \"Chris Dumez\" Dumez.\n\nTest: fast/dom/Element/normalize-crash2.html\n\n* dom/Element.cpp:\n(WebCore::Element::normalizeAttributes):\n\nLayoutTests:\n\n* fast/dom/Element/normalize-crash2-expected.txt: Added.\n* fast/dom/Element/normalize-crash2.html: Added.\n\n\ngit-svn-id: http://svn.webkit.org/repository/webkit/trunk@178363 268f45cc-cd09-0410-ab3c-d52691b4dbfc","distinct":true,"url":"https://api.github.com/repos/paul99/webkit-mips/commits/69ece180cc6005cc36b30cba6eb808193fde2af9"}]}