Bug 254370

Summary:	The HTML fast parser may not parse HTML entities correctly
Product:	WebKit	Reporter:	Chris Dumez <cdumez>
Component:	DOM	Assignee:	Chris Dumez <cdumez>
Status:	RESOLVED FIXED
Severity:	Normal	CC:	sky, webkit-bug-importer
Priority:	P2	Keywords:	InRadar
Version:	WebKit Nightly Build
Hardware:	Unspecified
OS:	Unspecified

Description Chris Dumez 2023-03-23 14:33:12 PDT

The code was assuming consumeHTMLEntity() consumes all the input, which is not necessarily the case. This fixes cases where the reference is only part of the text.

This is a cherry-pick from Blink:
- https://chromium-review.googlesource.com/c/chromium/src/+/4305159

Comment 1 Chris Dumez 2023-03-23 14:35:05 PDT

Pull request: https://github.com/WebKit/WebKit/pull/11888

Comment 2 EWS 2023-03-23 18:21:32 PDT

Committed 262050@main (609c58ee5017): <https://commits.webkit.org/262050@main>

Reviewed commits have been landed. Closing PR #11888 and removing active labels.

Comment 3 Radar WebKit Bug Importer 2023-03-23 18:22:15 PDT

<rdar://problem/107164249>