Ian Kilpatrick
f2723f2022
Automatic update from web-platform-tests [layout] Fix anonymous LayoutInline crash with new reinsert logic. The new reinsert logic added in: https://chromium-review.googlesource.com/c/chromium/src/+/7427180 Had an issue where the reinsert logic differed from the reattachment logic. The reinsert logic used: LayoutTreeBuilderTraversal::NextSiblingLayoutObject But the reattachment logic has additional logic within: LayoutTreeBuild::NextLayoutObject We should have been using the logic for reattachment. Extract this out to a LayoutTreeBuilderTraversal::NextSiblingLayoutObjectForAttachment and update the callsites. Fixed: 492374383 Change-Id: I05996ffad7b756144361ce38d71f4aed078ac44b Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7673932 Reviewed-by: Rune Lillesveen <futhark@chromium.org> Commit-Queue: Ian Kilpatrick <ikilpatrick@chromium.org> Reviewed-by: Morten Stenshorne <mstensho@chromium.org> Cr-Commit-Position: refs/heads/main@{#1601964} -- wpt-commits: 5a19456479f787f8b00b57b9705ac06a58498327 wpt-pr: 58616
8 lines
167 B
HTML
8 lines
167 B
HTML
<!DOCTYPE html>
|
|
<div id="target"></div>
|
|
<div contenteditable style="display:contents">X</div>
|
|
<script>
|
|
document.body.offsetTop;
|
|
target.style.float = 'left';
|
|
</script>
|