tree 1dfce7d9728f25650ac900dbf7b604d53b1ad0c1
parent b49d75a7d738fb953d22c456fd52372752ed9cea
author said@apple.com <said@apple.com@268f45cc-cd09-0410-ab3c-d52691b4dbfc> 1558113965 +0000
committer said@apple.com <said@apple.com@268f45cc-cd09-0410-ab3c-d52691b4dbfc> 1558113965 +0000

SVGElement should detach itself from all its properties before it is deleted
https://bugs.webkit.org/show_bug.cgi?id=197954

Reviewed by Simon Fraser.

Source/WebCore:

Before deleting the SVGElement node, SVGElement::detachAllProperties()
needs to be called. This will make the properties be detached objects
which means no change will be committed unless these properties are
attached to another owner.

Test: svg/dom/svg-properties-detach-change.html

* dom/Node.cpp:
(WebCore::Node::removedLastRef):
* svg/SVGElement.h:
(WebCore::SVGElement::detachAllProperties):

LayoutTests:

* svg/dom/svg-properties-detach-change-expected.txt: Added.
* svg/dom/svg-properties-detach-change.html : Added.


git-svn-id: http://svn.webkit.org/repository/webkit/trunk@245469 268f45cc-cd09-0410-ab3c-d52691b4dbfc