Files
sousa-gecko/testing/web-platform/tests/css/css-ui/crashtests
Jason Leo 98635c3a38 Bug 2045896 [wpt PR 60469] - Manual export: Forbid generated images as cursor via light-dark(), a=testonly
Automatic update from web-platform-tests
Forbid generated images as cursor via light-dark() (#60469)

The 'cursor' property forbids generated images, but light-dark()
resolved its branches without honoring that policy, letting a gradient
become a cursor image. Gradients are re-instantiated on every style
recalc, so the per-instance image-observer bookkeeping in
UpdateCursorImages drifted and RemoveClient() hit a SECURITY_CHECK
during layout teardown.

Bug: 518872187
Change-Id: I45cab2c148b60a673f1381e560d90d6ce9d57e9c
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7898340
Reviewed-by: Rune Lillesveen <futhark@chromium.org>
Commit-Queue: Jason Leo <cgqaq@chromium.org>
Cr-Commit-Position: refs/heads/main@{#1642106}

Co-authored-by: Jason Leo <cgqaq@chromium.org>
--

wpt-commits: abb03d330520ffdf458433d209e3fbd9b2842c74
wpt-pr: 60469
2026-06-11 08:49:51 +00:00
..