NodeIterator#nextNode crashes inside a MutationObserver callback

Fixed Issue #13767906

Details

Author
Sam S.
Created
Sep 14, 2017
Privacy
This issue is public.
Found in
  • Microsoft Edge
Found in build #
15.15063
Reports
Reported by 1 person

Sign in to watch or report this issue.

Steps to reproduce

To reproduce, open the attached test case, focus the editor, type the letter “a,” and then press the Return key three times. The browser tab crashes on the third Return.

This test case uses the Trix editor. I have not yet distilled a more minimal test case without the Trix dependency, but I suspect the issue may be related to Trix’s rendering inside its own MutationObserver callback as a result of the above key sequence.

UPDATE by MS Edge team

There is no crash, but the webpage stops responding.

Attachments

Comments and activity

  • Microsoft Edge Team

    Changed Assigned To to “James M.”

    Changed Steps to Reproduce

    Changed Status to “Fixed”

  • Hello,

    Thank you for providing this information about the issue. We are pleased to report this feature is fixed in Edge 16299 and is available in our latest Insider Preview build in the Fast ring.

    Best Wishes,
    The MS Edge Team

You need to sign in to your Microsoft account to add a comment.

Sign in