This issue is marked as a release blocker with no milestone associated. Please add an appropriate milestone.

All release blocking issues should have milestones associated to it, so that the issue can tracked and the fixes can be pushed promptly.

This issue is marked as a release blocker with no OS labels associated. Please add an appropriate OS label.

All release blocking issues should have OS labels associated to it, so that the issue can tracked and promptly verified, once it gets fixed.

Thanks for your time! To disable nags, add the Disable-Nags label.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot

M67 Stable promotion is coming soon. Your bug is labelled as Stable ReleaseBlock, pls make sure to land the fix and request a merge into the release branch ASAP. Thank you.

*** Bulk Edit ***
M67 Stable promotion is coming soon. Your bug is labelled as Stable ReleaseBlock, pls make sure to land the fix and request a merge into the release branch ASAP. 

If fix is already merged to M67 and nothing else is pending, pls mark the bug as fixed. Thank you.

*** Bulk Edit ***
M67 Stable promotion is coming VERY soon. Your bug is labelled as Stable ReleaseBlock, pls make sure to land the fix and request a merge into the release branch ASAP. 

If fix is already merged to M67 and nothing else is pending, pls mark the bug as fixed. Thank you.

chrishtr@ please take a look and update the status of this stable blocker as soon as possible

*** Bulk Edit ***
M67 Stable promotion is coming VERY soon. Your bug is labelled as Stable ReleaseBlock, pls make sure to land the fix and request a merge into the release branch ASAP. 

If fix is already merged to M67 and nothing else is pending, pls mark the bug as fixed. Thank you.

An example that actually reproduces attached.

Hovering over an area outside of the circle but inside of its bounding
rect should not cause a hit test to return true.

Deleted: test.html 410 bytes

test.html 410 bytes View Download

The following revision refers to this bug:
  https://chromium.googlesource.com/chromium/src.git/+/e718b946295929125f8c3283f9c94338e1eb4224

commit e718b946295929125f8c3283f9c94338e1eb4224
Author: Chris Harrelson <chrishtr@chromium.org>
Date: Fri May 11 23:01:36 2018

[ForeignObject PaintLayer] Fix <foreignObject> hit testing under simple SVG clip-path.

Now that <foreignObject> gets a PaintLayer, hit testing no longer works correctly
in the presence of a non-rectangular SVG clip path. This is because SVG children elements
which are not <foreignObject> cannot have a PaintLayer, and PaintLayer is the only way
hit testing currently knows how to account for clip-path.

Fix this for "simple" clip-paths by adding a method to perform hit test clipping
on the clip paint property tree. It works by checking all clips and clip-paths
stored on the clip paint property tree between the local and ancestor points
(in this use-case the ancestor is the containing PaintLayer), applying transforms
as necessary.

Non-"simple" clip paths (defined as SVG clip paths which have more than 42 edges
or having text) are not fixed by this CL. The former condition could be handled in the
future by adding a ClipPathForHitTesting to ClipPaintPropertyNode which stores the
clip-path beyond 42 edges.

Bug:833076

Cq-Include-Trybots: master.tryserver.blink:linux_trusty_blink_rel;master.tryserver.chromium.linux:linux_layout_tests_slimming_paint_v2
Change-Id: Iabbce97d412fe38a4b775739517d28628ef67964
Reviewed-on: https://chromium-review.googlesource.com/1055788
Commit-Queue: Chris Harrelson <chrishtr@chromium.org>
Reviewed-by: Tien-Ren Chen <trchen@chromium.org>
Cr-Commit-Position: refs/heads/master@{#558049}
[modify] https://crrev.com/e718b946295929125f8c3283f9c94338e1eb4224/third_party/blink/renderer/core/layout/svg/layout_svg_foreign_object_test.cc
[modify] https://crrev.com/e718b946295929125f8c3283f9c94338e1eb4224/third_party/blink/renderer/core/paint/paint_layer.cc
[modify] https://crrev.com/e718b946295929125f8c3283f9c94338e1eb4224/third_party/blink/renderer/platform/graphics/paint/geometry_mapper.cc
[modify] https://crrev.com/e718b946295929125f8c3283f9c94338e1eb4224/third_party/blink/renderer/platform/graphics/paint/geometry_mapper.h
[modify] https://crrev.com/e718b946295929125f8c3283f9c94338e1eb4224/third_party/blink/renderer/platform/graphics/paint/geometry_mapper_test.cc

How is the change listed at #10 looking in canary?

Looks correct in Canary. Ready to merge.

This bug requires manual review: M67 has already been promoted to the beta branch, so this requires manual review
Please contact the milestone owner if you have questions.
Owners: cmasso@(Android), cmasso@(iOS), kbleicher@(ChromeOS), govind@(Desktop)

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot

Approving merge to M67 branch 3396 based on comment #12. Please merge. Thank you.

The following revision refers to this bug:
  https://chromium.googlesource.com/chromium/src.git/+/c7f11ffece231f155b53e0fd3334ac3f20eef6b5

commit c7f11ffece231f155b53e0fd3334ac3f20eef6b5
Author: Chris Harrelson <chrishtr@chromium.org>
Date: Mon May 14 22:10:30 2018

[ForeignObject PaintLayer] Fix <foreignObject> hit testing under simple SVG clip-path.

Now that <foreignObject> gets a PaintLayer, hit testing no longer works correctly
in the presence of a non-rectangular SVG clip path. This is because SVG children elements
which are not <foreignObject> cannot have a PaintLayer, and PaintLayer is the only way
hit testing currently knows how to account for clip-path.

Fix this for "simple" clip-paths by adding a method to perform hit test clipping
on the clip paint property tree. It works by checking all clips and clip-paths
stored on the clip paint property tree between the local and ancestor points
(in this use-case the ancestor is the containing PaintLayer), applying transforms
as necessary.

Non-"simple" clip paths (defined as SVG clip paths which have more than 42 edges
or having text) are not fixed by this CL. The former condition could be handled in the
future by adding a ClipPathForHitTesting to ClipPaintPropertyNode which stores the
clip-path beyond 42 edges.

Bug:833076

TBR=chrishtr@chromium.org

(cherry picked from commit e718b946295929125f8c3283f9c94338e1eb4224)

Cq-Include-Trybots: master.tryserver.blink:linux_trusty_blink_rel;master.tryserver.chromium.linux:linux_layout_tests_slimming_paint_v2
Change-Id: Iabbce97d412fe38a4b775739517d28628ef67964
Reviewed-on: https://chromium-review.googlesource.com/1055788
Commit-Queue: Chris Harrelson <chrishtr@chromium.org>
Reviewed-by: Tien-Ren Chen <trchen@chromium.org>
Cr-Original-Commit-Position: refs/heads/master@{#558049}
Reviewed-on: https://chromium-review.googlesource.com/1058371
Reviewed-by: Chris Harrelson <chrishtr@chromium.org>
Cr-Commit-Position: refs/branch-heads/3396@{#598}
Cr-Branched-From: 9ef2aa869bc7bc0c089e255d698cca6e47d6b038-refs/heads/master@{#550428}
[modify] https://crrev.com/c7f11ffece231f155b53e0fd3334ac3f20eef6b5/third_party/blink/renderer/core/layout/svg/layout_svg_foreign_object_test.cc
[modify] https://crrev.com/c7f11ffece231f155b53e0fd3334ac3f20eef6b5/third_party/blink/renderer/core/paint/paint_layer.cc
[modify] https://crrev.com/c7f11ffece231f155b53e0fd3334ac3f20eef6b5/third_party/blink/renderer/platform/graphics/paint/geometry_mapper.cc
[modify] https://crrev.com/c7f11ffece231f155b53e0fd3334ac3f20eef6b5/third_party/blink/renderer/platform/graphics/paint/geometry_mapper.h
[modify] https://crrev.com/c7f11ffece231f155b53e0fd3334ac3f20eef6b5/third_party/blink/renderer/platform/graphics/paint/geometry_mapper_test.cc