
google-caja - issue #1961
caja incorrectly nests empty HTML nodes causing them to be displayed in reverse order
What steps will reproduce the problem?
============== cajole the script below ===============
caja incorrectly nests empty HTML nodes causing them to be displayed in reverse order.<p/>
These table nodes contain separate open and close tags. caja renders them in the order in which they are defined in the HTML as expected.<p/> <table id="full_first"></table> <table id="full_second"></table> <table id="full_third"></table>
These table nodes are created as empty since they are populated at run time. caja incorrectly nests them inside of each other so they are appear to be rendered in reverse order.<p/> <table id="empty_first"/> <table id="empty_second"/> <table id="empty_third"/>
<script src="//ajax.googleapis.com/ajax/libs/jquery/1.9.1/jquery.min.js"> </script> <script>
test("full") test("empty")
function test(prefix) { var row = $("<tr/>") row.append($('<td/>').text(prefix + "_first")); $("#" + prefix + "_first").append(row);
var row = $("<tr/>") row.append($('<td/>').text(prefix + "_second")); $("#" + prefix + "_second").append(row);
var row = $("<tr/>"); row.append($('<td/>').text(prefix + "_third")); $("#" + prefix + "_third").append(row); }
</script>
==============================
On what browser and OS? Chrome 41 Windows 7
Comment #1
Posted on Mar 26, 2015 by Happy KangarooThanks. I took a look and this is because our JS HTML parser doesn't implement the “in table” tree construction rules, so it is definitely a bug.
However, note that using / in this way is not correct HTML; both HTML4 and HTML "5" agree on that. (It would be correct if you were writing XHTML, instead. Though that's moot here since Caja never parses as XHTML.) You should remove the /> and use normal end tags instead.
Status: Accepted
Labels:
Type-Defect
Priority-Low
Component-Sanitizer