Branch: refs/heads/main
  Home:   https://github.com/WebKit/WebKit
  Commit: df06a95a287e3dd4e525ea60934a433e2ccba9fa
      
https://github.com/WebKit/WebKit/commit/df06a95a287e3dd4e525ea60934a433e2ccba9fa
  Author: Nikolas Zimmermann <[email protected]>
  Date:   2026-08-23 (Sun, 23 Aug 2026)

  Changed paths:
    M Source/WebCore/svg/SVGElement.cpp

  Log Message:
  -----------
  [LBSE] Assertion failure for SVG resource containers with a namespace prefix
https://bugs.webkit.org/show_bug.cgi?id=322357

Reviewed by Patrick Griffis.

Creating the renderer for <svg:filter> fires an assertion:

ASSERTION FAILED: SVGElement::isResourceContainerTagName(element.tagQName())
Source/WebCore/rendering/svg/RenderSVGResourceContainer.cpp(47)
...

A tag can be written with a namespace prefix, as in <svg:filter>. Two
QualifiedNames are only equal when their prefixes match as well, so
<svg:filter> is not equal to SVGNames::filterTag. isResourceContainerTagName()
looked up the whole tag in a HashSet<QualifiedName> and thus missed every
prefixed resource container. Element::hasTagName() gets this right by calling
QualifiedName::matches(), which compares the local name and the namespace and
ignores the prefix.

Fix debug assertions in svg/dynamic-updates - covered by existing tests.

* Source/WebCore/svg/SVGElement.cpp:
(WebCore::SVGElement::isResourceContainerTagName):

Canonical link: https://commits.webkit.org/319663@main



To unsubscribe from these emails, change your notification settings at 
https://github.com/WebKit/WebKit/settings/notifications

Reply via email to