[CSSRegions][CSSOM]Restrict parsing of named flow name
authormihnea@adobe.com <mihnea@adobe.com@268f45cc-cd09-0410-ab3c-d52691b4dbfc>
Tue, 6 Mar 2012 22:41:28 +0000 (22:41 +0000)
committermihnea@adobe.com <mihnea@adobe.com@268f45cc-cd09-0410-ab3c-d52691b4dbfc>
Tue, 6 Mar 2012 22:41:28 +0000 (22:41 +0000)
commitf4d9d4b5ddde1bed6e9f23138c7a715e092cb797
tree2d6d9567a1256cdddc5595b00184893dee511b9b
parent20ee0002735e26c11e585800df3d0b3ec9625db6
[CSSRegions][CSSOM]Restrict parsing of named flow name
https://bugs.webkit.org/show_bug.cgi?id=80359

Reviewed by Andreas Kling.

The function that does the parsing for flow thread name should restrict the
number of parsed properties to 1, otherwise it would allow parsing of
"-webkit-flow-into: flow; color: red;" constructions.

Source/WebCore:

Modified fast/regions/webkit-named-flow-invalid-name.html to include the above case.

* css/CSSParser.cpp:
(WebCore::validFlowName):
(WebCore::CSSParser::parseFlowThread):

LayoutTests:

* fast/regions/webkit-named-flow-invalid-name-expected.txt:
* fast/regions/webkit-named-flow-invalid-name.html:

git-svn-id: http://svn.webkit.org/repository/webkit/trunk@109961 268f45cc-cd09-0410-ab3c-d52691b4dbfc
LayoutTests/ChangeLog
LayoutTests/fast/regions/webkit-named-flow-invalid-name-expected.txt
LayoutTests/fast/regions/webkit-named-flow-invalid-name.html
Source/WebCore/ChangeLog
Source/WebCore/css/CSSParser.cpp