Cherry-pick WebKit security fix (webkit.org r68860) Do not merge

See http://trac.webkit.org/changeset/68860 Change-Id: I7860374528be836e1f4ea7c6faa48966fd3ed23c
jahrome · Oct 21, 2010 · a7b8ec7 · a7b8ec7
1 parent 93bec1e
commit a7b8ec7
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/WebCore/rendering/RenderObjectChildList.cpp b/WebCore/rendering/RenderObjectChildList.cpp
@@ -429,7 +429,10 @@ void RenderObjectChildList::updateBeforeAfterContent(RenderObject* owner, Pseudo
                 generatedContentContainer->setStyle(pseudoElementStyle);
                 owner->addChild(generatedContentContainer, insertBefore);
             }
-            generatedContentContainer->addChild(renderer);
+            if (generatedContentContainer->isChildAllowed(renderer, pseudoElementStyle))
+                generatedContentContainer->addChild(renderer);
+            else
+                renderer->destroy();
         }
     }
 }