Jelle Raaijmakers 3e4a1cbd55 LibWeb: Use ConservativeVector for recorded node values in Editing API ...

The `RecordedNodeValue` struct contains a `GC::Ref` to a DOM node, which
might disappear as a result of a garbage collection. For example, during
the "outdent" command, we record nodes, split the parent of those nodes
potentially resulting in all kinds of DOM changes, and then try to
restore the nodes' values. This caused a crash in the
`editing/run/outdent.html` WPT subtests.

By returning a `ConservativeVector`, we make sure the `GC::Ref` gets
marked during sweeps and nodes do not suddenly disappear.

2025-07-30 16:36:17 -04:00

222 KiB

Raw Blame History

View Raw