Bug 257412

Summary:	jsc_fuz/wktr: RELEASE_ASSERT(!isInTopLayer()); WebCore::Element::addToTopLayer() + 508 (Element.cpp:3849)
Product:	WebKit	Reporter:	Tim Nguyen (:ntim) <ntim>
Component:	DOM	Assignee:	Rob Buis <rbuis>
Status:	RESOLVED FIXED
Severity:	Normal	CC:	rbuis, webkit-bug-importer
Priority:	P2	Keywords:	InRadar
Version:	WebKit Nightly Build
Hardware:	Unspecified
OS:	Unspecified
Bug Depends on:
Bug Blocks:	250171

Description Tim Nguyen (:ntim) 2023-05-27 01:05:44 PDT

Testcase:

```
<script>
  onload = () => {
    dialog0.showModal();
    dialog0.open = false;
    dialog0.showPopover();
  };
</script>
<dialog id="dialog0" popover=""></dialog>
```

Comment 1 Tim Nguyen (:ntim) 2023-05-27 01:06:02 PDT

rdar://109824133

Comment 2 Tim Nguyen (:ntim) 2023-05-27 01:10:59 PDT

Spec PR: https://github.com/whatwg/html/pull/9344

Comment 3 Rob Buis 2023-05-29 07:40:10 PDT

Pull request: https://github.com/WebKit/WebKit/pull/14454

Comment 4 EWS 2023-06-05 14:35:24 PDT

Committed 264876@main (62bb3c714cc9): <https://commits.webkit.org/264876@main>

Reviewed commits have been landed. Closing PR #14454 and removing active labels.