hixie: Fix an infinite loop in parser: <select><input>, <select><keygen>, and <select><textarea> when setting innerHTML on a <select>. Thanks to gsnedders for catching this. (whatwg r3538)

hixie: Fix an infinite loop in parser: <select><input>,
<select><keygen>, and <select><textarea> when setting innerHTML on a
<select>. Thanks to gsnedders for catching this. (whatwg r3538)

http://dev.w3.org/cvsweb/html5/spec/Overview.html?r1=1.2733&r2=1.2734&f=h
http://html5.org/tools/web-apps-tracker?from=3537&to=3538

===================================================================
RCS file: /sources/public/html5/spec/Overview.html,v
retrieving revision 1.2733
retrieving revision 1.2734
diff -u -d -r1.2733 -r1.2734
--- Overview.html 4 Aug 2009 23:34:55 -0000 1.2733
+++ Overview.html 4 Aug 2009 23:55:29 -0000 1.2734
@@ -58528,8 +58528,16 @@
 
    <dt>A start tag whose tag name is one of: "input", "keygen", "textarea"</dt>
    <dd>
-    <p><a href="#parse-error">Parse error</a>. Act as if an end tag with the tag
-    name "select" had been seen, and reprocess the token.</p>
+
+    <p><a href="#parse-error">Parse error</a>.</p>
+
+    <p>If the <a href="#stack-of-open-elements">stack of open elements</a> does not <a href="#has-an-element-in-table-scope" title="has an element in table scope">have an element in table
+    scope</a> with the same tag name as the token, ignore the
+    token. (<a href="#fragment-case">fragment case</a>)</p>
+
+    <p>Otherwise, act as if an end tag with the tag name "select" had
+    been seen, and reprocess the token.</p>
+
    </dd>
 
    <dt>A start tag token whose tag name is "script"</dt>

Received on Tuesday, 4 August 2009 23:56:26 UTC