-
morrita@google.com authored
https://bugs.webkit.org/show_bug.cgi?id=106985 Reviewed by Ryosuke Niwa. Source/WebCore: This change narrowed the lifetime of NoEventDispatchAssertion in removeChildren(). It is as safe as other mutation method even after this change: childrenChanged() and ChildNodeRemovalNotifier are used outside the assertion scope. Test: svg/custom/use-mutation-crash.xhtml * dom/ContainerNode.cpp: (WebCore::ContainerNode::removeChildren): LayoutTests: * svg/custom/use-mutation-crash-expected.txt: Added. * svg/custom/use-mutation-crash.xhtml: Added. git-svn-id: http://svn.webkit.org/repository/webkit/trunk@139964 268f45cc-cd09-0410-ab3c-d52691b4dbfc
e49b9190