Diff
Modified: releases/WebKitGTK/webkit-1.10/LayoutTests/ChangeLog (137059 => 137060)
--- releases/WebKitGTK/webkit-1.10/LayoutTests/ChangeLog 2012-12-09 09:04:41 UTC (rev 137059)
+++ releases/WebKitGTK/webkit-1.10/LayoutTests/ChangeLog 2012-12-09 09:18:19 UTC (rev 137060)
@@ -1,3 +1,13 @@
+2012-10-30 Kent Tamura <[email protected]>
+
+ Delaying 'change' and 'input' event dispatching during HTMLInputElement::setValue
+ https://bugs.webkit.org/show_bug.cgi?id=100772
+
+ Reviewed by Abhishek Arya.
+
+ * fast/forms/range/range-type-change-onchange-expected.txt: Added.
+ * fast/forms/range/range-type-change-onchange.html: Added.
+
2012-11-01 Stephen Chenney <[email protected]>
SVG as an image may recreate the renderer on zoom
Added: releases/WebKitGTK/webkit-1.10/LayoutTests/fast/forms/range/range-type-change-onchange-expected.txt (0 => 137060)
--- releases/WebKitGTK/webkit-1.10/LayoutTests/fast/forms/range/range-type-change-onchange-expected.txt (rev 0)
+++ releases/WebKitGTK/webkit-1.10/LayoutTests/fast/forms/range/range-type-change-onchange-expected.txt 2012-12-09 09:18:19 UTC (rev 137060)
@@ -0,0 +1,10 @@
+Check if no problem happens by type change in onchange handler.
+
+On success, you will see a series of "PASS" messages, followed by "TEST COMPLETE".
+
+
+PASS unless crash
+PASS successfullyParsed is true
+
+TEST COMPLETE
+
Added: releases/WebKitGTK/webkit-1.10/LayoutTests/fast/forms/range/range-type-change-onchange.html (0 => 137060)
--- releases/WebKitGTK/webkit-1.10/LayoutTests/fast/forms/range/range-type-change-onchange.html (rev 0)
+++ releases/WebKitGTK/webkit-1.10/LayoutTests/fast/forms/range/range-type-change-onchange.html 2012-12-09 09:18:19 UTC (rev 137060)
@@ -0,0 +1,23 @@
+<!DOCTYPE html>
+<body>
+<script src=""
+
+<input id="range1" type="range" _onchange_="updateType(this)" autofocus>
+<script>
+description('Check if no problem happens by type change in onchange handler.');
+
+function updateType(input) {
+ input.type = 'text';
+ setTimeout(finish, 0);
+}
+
+function finish() {
+ testPassed('unless crash');
+ finishJSTest();
+}
+
+jsTestIsAsync = true;
+eventSender.keyDown('upArrow');
+</script>
+<script src=""
+</body>
Modified: releases/WebKitGTK/webkit-1.10/Source/WebCore/ChangeLog (137059 => 137060)
--- releases/WebKitGTK/webkit-1.10/Source/WebCore/ChangeLog 2012-12-09 09:04:41 UTC (rev 137059)
+++ releases/WebKitGTK/webkit-1.10/Source/WebCore/ChangeLog 2012-12-09 09:18:19 UTC (rev 137060)
@@ -1,3 +1,24 @@
+2012-10-30 Kent Tamura <[email protected]>
+
+ Delaying 'change' and 'input' event dispatching during HTMLInputElement::setValue
+ https://bugs.webkit.org/show_bug.cgi?id=100772
+
+ Reviewed by Abhishek Arya.
+
+ 'change' and 'input' events are asynchronous and not
+ cancelable. We can use ScopedEvent.
+
+ Test: fast/forms/range/range-type-change-onchange.html
+
+ * dom/Node.cpp:
+ (WebCore::Node::dispatchChangeEvent): Use dispatchScopedEvent.
+ (WebCore::Node::dispatchInputEvent): Ditto.
+ * html/HTMLInputElement.cpp:
+ (WebCore::HTMLInputElement::setValue):
+ Make a scope to delay event dispatching.
+ * html/RangeInputType.cpp:
+ (WebCore::RangeInputType::handleKeydownEvent): Ditto.
+
2012-11-01 Stephen Chenney <[email protected]>
SVG as an image may recreate the renderer on zoom
Modified: releases/WebKitGTK/webkit-1.10/Source/WebCore/dom/Node.cpp (137059 => 137060)
--- releases/WebKitGTK/webkit-1.10/Source/WebCore/dom/Node.cpp 2012-12-09 09:04:41 UTC (rev 137059)
+++ releases/WebKitGTK/webkit-1.10/Source/WebCore/dom/Node.cpp 2012-12-09 09:18:19 UTC (rev 137060)
@@ -2681,12 +2681,12 @@
void Node::dispatchChangeEvent()
{
- dispatchEvent(Event::create(eventNames().changeEvent, true, false));
+ dispatchScopedEvent(Event::create(eventNames().changeEvent, true, false));
}
void Node::dispatchInputEvent()
{
- dispatchEvent(Event::create(eventNames().inputEvent, true, false));
+ dispatchScopedEvent(Event::create(eventNames().inputEvent, true, false));
}
bool Node::disabled() const
Modified: releases/WebKitGTK/webkit-1.10/Source/WebCore/html/HTMLInputElement.cpp (137059 => 137060)
--- releases/WebKitGTK/webkit-1.10/Source/WebCore/html/HTMLInputElement.cpp 2012-12-09 09:04:41 UTC (rev 137059)
+++ releases/WebKitGTK/webkit-1.10/Source/WebCore/html/HTMLInputElement.cpp 2012-12-09 09:18:19 UTC (rev 137060)
@@ -54,6 +54,7 @@
#include "NumberInputType.h"
#include "RenderTextControlSingleLine.h"
#include "RenderTheme.h"
+#include "ScopedEventQueue.h"
#include "SearchInputType.h"
#include "ShadowRoot.h"
#include "ScriptEventListener.h"
@@ -976,6 +977,7 @@
return;
RefPtr<HTMLInputElement> protector(this);
+ EventQueueScope scope;
String sanitizedValue = sanitizeValue(value);
bool valueChanged = sanitizedValue != this->value();
Modified: releases/WebKitGTK/webkit-1.10/Source/WebCore/html/RangeInputType.cpp (137059 => 137060)
--- releases/WebKitGTK/webkit-1.10/Source/WebCore/html/RangeInputType.cpp 2012-12-09 09:04:41 UTC (rev 137059)
+++ releases/WebKitGTK/webkit-1.10/Source/WebCore/html/RangeInputType.cpp 2012-12-09 09:18:19 UTC (rev 137060)
@@ -42,6 +42,7 @@
#include "MouseEvent.h"
#include "PlatformMouseEvent.h"
#include "RenderSlider.h"
+#include "ScopedEventQueue.h"
#include "ShadowRoot.h"
#include "SliderThumbElement.h"
#include "StepRange.h"
@@ -234,6 +235,7 @@
newValue = stepRange.clampValue(newValue);
if (newValue != current) {
+ EventQueueScope scope;
ExceptionCode ec;
TextFieldEventBehavior eventBehavior = DispatchChangeEvent;
setValueAsDecimal(newValue, eventBehavior, ec);
