Bug 1691571 [wpt PR 27537] - [TablesNG] clusterfuzz: inconstistent NG/Legacy tree, a=testonly

Automatic update from web-platform-tests [TablesNG] clusterfuzz: inconstistent NG/Legacy tree When: - DIALOG has display:table-row-group - DIALOG is forced into Legacy layout. - DIALOG gets shown with showModal. We end up with a LayoutNGTable LayoutTableSection This is because CreateAnonymousTableWithParent gets a hint of whether it should be NG or Legacy from parent (#document), and not its future child (LayoutTableSection). Fix: pass through a variable to force legacy if needed. Bug: 1175222 Change-Id: I7898f70f9a8d98797d4289bb3050c82514010033 Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2683044 Auto-Submit: Aleks Totic <atotic@chromium.org> Reviewed-by: Morten Stenshorne <mstensho@chromium.org> Commit-Queue: Morten Stenshorne <mstensho@chromium.org> Cr-Commit-Position: refs/heads/master@{#852153} -- wpt-commits: d229da2bd2a1524036a3286e03b50a6a48216836 wpt-pr: 27537
2021-02-11 16:46:58 +00:00 · 2021-02-11 16:46:58 +00:00 · 70ac9440ac
--- a/testing/web-platform/tests/css/css-tables/crashtests/dialog-table-crash.html
+++ b/testing/web-platform/tests/css/css-tables/crashtests/dialog-table-crash.html
@ -0,0 +1,16 @@
+<!DOCTYPE html>
+<link rel="help" href="https://crbug.com/1175425">
+
+<div id="container" style="border-collapse:collapse;">
+  <div id="insertBefore"></div>
+  <div style="display:table-row-group;"></div>
+  <div id="victim" style="border:solid; display:table-row-group;">
+    <div style="display:table-cell;"></div>
+  </div>
+</div>
+
+<script>
+  document.body.offsetTop;
+  container.insertBefore(insertBefore, victim)
+</script>
+