New issue
Advanced search Search tips
Note: Color blocks (like or ) mean that a user may not be available. Tooltip shows the reason.

Issue 640923 link

Starred by 5 users

Issue metadata

Status: Duplicate
Merged: issue 639541
Owner:
Last visit > 30 days ago
Closed: Sep 2016
Components:
EstimatedDays: ----
NextAction: ----
OS: ----
Pri: 2
Type: Bug-Regression



Sign in to add a comment

html entities replaced in <script> preceded by an <svg> containing a <title>

Reported by hu...@cumallover.me, Aug 25 2016

Issue description

UserAgent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2838.2 Safari/537.36

Example URL:
https://theintercept.com/

Steps to reproduce the problem:
1. save and open this html document:

    <!doctype html>
    <svg><title></title></svg>
    <script>console.log("&quot;");</script>

What is the expected behavior?
"&quot;" logged in the console

What went wrong?
Uncaught SyntaxError: Invalid or unexpected token

Does it occur on multiple sites: N/A

Is it a problem with a plugin? No 

Did this work before? Yes 52.0.2743.116 (Official Build) m (64-bit)

Does this work in other browsers? Yes 

Chrome version: 54.0.2838.2  Channel: canary
OS Version: 10.0
Flash Version: Shockwave Flash 22.0 r0

the script element's innerHTML shows the syntax error: `console.log(""");`

removing or reordering the svg or title elements makes it log "&quot;" correctly

the example url shows a 404 page because of this bug

someone was having the bug here: https://www.reddit.com/r/chrome/comments/4zgf5i/bug_chrome_throwing_404_error_for_a_page_which_is/
> It opens fine in IE, Edge everything.
> Chrome Version 54.0.2837.0 dev-m (64-bit) on Windows 10 Home.
 

Comment 1 by f...@opera.com, Aug 25 2016

Components: Blink>HTML>Parser
Labels: -OS-Windows -Type-Compat Type-Bug-Regression
Owner: dominicc@chromium.org
Status: Assigned (was: Unconfirmed)
Bisected to 30869b3a11a19398108e1ba1254858f3fcc735ca

html-parser-html-integration-point-bug.html
83 bytes View Download
The exact same bug also occurs in Chrome Version 54.0.2840.14 dev (64-bit) for macOS.
Screen Shot 2016-09-06 at 21.37.11.png
57.0 KB View Download

Comment 3 by f...@opera.com, Sep 29 2016

 Issue 651176  has been merged into this issue.

Comment 4 by f...@opera.com, Sep 29 2016

Mergedinto: 639541
Status: Duplicate (was: Assigned)

Sign in to add a comment