Issue metadata
Sign in to add a comment
|
html entities replaced in <script> preceded by an <svg> containing a <title>
Reported by
hu...@cumallover.me,
Aug 25 2016
|
||||||||||||||||||||||
Issue descriptionUserAgent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2838.2 Safari/537.36 Example URL: https://theintercept.com/ Steps to reproduce the problem: 1. save and open this html document: <!doctype html> <svg><title></title></svg> <script>console.log(""");</script> What is the expected behavior? """ logged in the console What went wrong? Uncaught SyntaxError: Invalid or unexpected token Does it occur on multiple sites: N/A Is it a problem with a plugin? No Did this work before? Yes 52.0.2743.116 (Official Build) m (64-bit) Does this work in other browsers? Yes Chrome version: 54.0.2838.2 Channel: canary OS Version: 10.0 Flash Version: Shockwave Flash 22.0 r0 the script element's innerHTML shows the syntax error: `console.log(""");` removing or reordering the svg or title elements makes it log """ correctly the example url shows a 404 page because of this bug someone was having the bug here: https://www.reddit.com/r/chrome/comments/4zgf5i/bug_chrome_throwing_404_error_for_a_page_which_is/ > It opens fine in IE, Edge everything. > Chrome Version 54.0.2837.0 dev-m (64-bit) on Windows 10 Home.
,
Sep 7 2016
The exact same bug also occurs in Chrome Version 54.0.2840.14 dev (64-bit) for macOS.
,
Sep 29 2016
Issue 651176 has been merged into this issue.
,
Sep 29 2016
|
|||||||||||||||||||||||
►
Sign in to add a comment |
|||||||||||||||||||||||
Comment 1 by f...@opera.com
, Aug 25 2016Labels: -OS-Windows -Type-Compat Type-Bug-Regression
Owner: dominicc@chromium.org
Status: Assigned (was: Unconfirmed)
83 bytes
83 bytes View Download