mirror of
https://github.com/mozilla/gecko-dev.git
synced 2024-10-22 09:45:41 +00:00
ff890f406e
When we call nsContentUtils::IsPatternMatching, we swallow JS engine errors unconditionally returning true. This is bad, because if it happens in one of the value sets that arguably shouldn't change the state of the element, we end up returning an arbitrary value (true) which may or may not match the previous state of the element. Handle error explicitly instead, by not updating the state. Differential Revision: https://phabricator.services.mozilla.com/D45727 --HG-- extra : moz-landing-system : lando
16 lines
331 B
HTML
16 lines
331 B
HTML
<script>
|
|
function start() {
|
|
document.addEventListener('DOMAttrModified', function() {
|
|
b.scroll()
|
|
b.setAttribute('dir', 'ltr')
|
|
b.dir = ''
|
|
})
|
|
a.setAttribute('d', '')
|
|
}
|
|
document.addEventListener('DOMContentLoaded', start)
|
|
</script>
|
|
<form dir="rtl">
|
|
<object id="a">
|
|
<input value="X" multiple pattern="[]">
|
|
<p id="b">
|