W3C home > Mailing lists > Public > public-html-commits@w3.org > August 2009

html5/spec Overview.html,1.2733,1.2734

From: Ian Hickson via cvs-syncmail <cvsmail@w3.org>
Date: Tue, 04 Aug 2009 23:55:32 +0000
To: public-html-commits@w3.org
Message-Id: <E1MYTqu-00063R-I6@lionel-hutz.w3.org>
Update of /sources/public/html5/spec
In directory hutz:/tmp/cvs-serv23254

Modified Files:
	Overview.html 
Log Message:
Fix an infinite loop in parser: <select><input>, <select><keygen>, and <select><textarea> when setting innerHTML on a <select>. Thanks to gsnedders for catching this. (whatwg r3538)

Index: Overview.html
===================================================================
RCS file: /sources/public/html5/spec/Overview.html,v
retrieving revision 1.2733
retrieving revision 1.2734
diff -u -d -r1.2733 -r1.2734
--- Overview.html	4 Aug 2009 23:34:55 -0000	1.2733
+++ Overview.html	4 Aug 2009 23:55:29 -0000	1.2734
@@ -58528,8 +58528,16 @@
 
    <dt>A start tag whose tag name is one of: "input", "keygen", "textarea"</dt>
    <dd>
-    <p><a href="#parse-error">Parse error</a>. Act as if an end tag with the tag
-    name "select" had been seen, and reprocess the token.</p>
+
+    <p><a href="#parse-error">Parse error</a>.</p>
+
+    <p>If the <a href="#stack-of-open-elements">stack of open elements</a> does not <a href="#has-an-element-in-table-scope" title="has an element in table scope">have an element in table
+    scope</a> with the same tag name as the token, ignore the
+    token. (<a href="#fragment-case">fragment case</a>)</p>
+
+    <p>Otherwise, act as if an end tag with the tag name "select" had
+    been seen, and reprocess the token.</p>
+
    </dd>
 
    <dt>A start tag token whose tag name is "script"</dt>
Received on Tuesday, 4 August 2009 23:55:42 GMT

This archive was generated by hypermail 2.2.0+W3C-0.50 : Tuesday, 4 August 2009 23:55:43 GMT