tree 55a1813a310fafc1d81c88ef865862869a932fd9
parent aedb48b0e291dfce2146ad3d86db23b2d69fc084
author Joey Arhar <jarhar@chromium.org> 1629851413 -0700
committer Blink WPT Bot <blink-w3c-test-autoroller@chromium.org> 1629852070 -0700

Disallow non-slotable nodes in slot.assign()

slot.assign() will happily accept nodes which aren't "slotable"
according to Node::IsSlotable(), which ends up creating flat tree node
data in those nodes. Later, we have a DCHECK which effectively says that
if the node isn't slotable, then it shouldn't have flat tree node data.

This patch disallows non-slotable nodes in slot.assign() which prevents
the problematic situation from happening.

Fixed: 1240783
Change-Id: Iec1d94319d73e0730cad06848109f1172e6b72ef
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/3114977
Commit-Queue: Joey Arhar <jarhar@chromium.org>
Reviewed-by: Mason Freed <masonf@chromium.org>
Cr-Commit-Position: refs/heads/main@{#914978}