angler-fishThe Vulnerability History Project

Revert 185598 &quotFix lifespan of ScopedStyleResolver&quot

      Reason: regressed on trunk, which is filed as crbug.com/434970.
This needs rework and shall be committed with this layout test
and more appropriate fix.

> Fix lifespan of ScopedStyleResolver
> 
> When a Shadow Tree is moved between different documents
> (e.g. document <-> iframe), ScopedStyleResolver can remain
> registered from its original document, which can result in
> duplicate registration and possibly cause double-free etc.
> 
> This CL fixes it by clearing a shadow tree's
> ScopedStyleResolver when the ShadowRoot is removed.
> 
> BUG=427249
> TEST=pass the new layout test
> 
> Review URL: https://codereview.chromium.org/721103002

TBR=kochi@chromium.org

Review URL: https://codereview.chromium.org/745613003

git-svn-id: svn://svn.chromium.org/blink/trunk@185673 bbb929c8-8fbe-4397-9dbb-9b2b20218538
    
commit 73c390dbc4a5f379f41f2b51b697afaab2118767
+1
+6
+1
+53
-1
+12 -7
expand_less