Infinite loop in fragment case

• From: Geoffrey Sneddon <gsneddon@opera.com>
• Date: Wed, 29 Jul 2009 15:55:00 +0200
• To: HTMLWG WG <public-html@w3.org>
• Message-ID: <4A7054B4.5060206@opera.com>

Setting innerHTML on a select element to a start tag of one of "input", 
"keygen", "textarea" causes an infinite loop. You have to act as if a 
"select" end tag has been seen, before reprocessing the token, but then 
you ignore the "select" end tag in fragment case, hence reprocessing the 
token in the same state, leading you on your way to an infinite loop. 
It'd be kinda nice to fix this.

-- 
Geoffrey Sneddon — Opera Software
<http://gsnedders.com/>
<http://www.opera.com/>

Received on Wednesday, 29 July 2009 13:55:45 UTC