angler-fishThe Vulnerability History Project

Let HTMLStyleElement::removedFrom beware in shadow tree with @scoped.

      HTMLStyleElement::removedFrom didn't handle the case where
@scope is specified and the element is in a shadow tree.

This change make these two state orthogonal by adding new TreeScope
parameter to StyleEngine::removeStyleSheetCandidateNode().

TEST=style-scoped-shadow-crash.html
BUG=350760
R=tasak,hayato

Review URL: https://codereview.chromium.org/193663002

git-svn-id: svn://svn.chromium.org/blink/trunk@169048 bbb929c8-8fbe-4397-9dbb-9b2b20218538
    
commit 9ab76a3f95a2c2e262946ee59603f8a6df8b566d
-2
-28
-6
+4 -12
+1 -3
+2 -6
+1 -2
+11 -15
expand_less