From 49077e2b9847c8758bd5db050d0561da4f85bacc Mon Sep 17 00:00:00 2001
From: ChangSeok Oh <changseok@webkit.org>
Date: Thu, 16 Apr 2020 17:37:24 +0100
Subject: [PATCH] Fix CVE-2020-11793

Origin: https://trac.webkit.org/changeset/258532/webkit

===================================================================

Gbp-Pq: Name cve-2020-11793-fix.patch
---
 Source/WebCore/html/HTMLTextAreaElement.cpp | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/Source/WebCore/html/HTMLTextAreaElement.cpp b/Source/WebCore/html/HTMLTextAreaElement.cpp
index 3741856367..681ca78001 100644
--- a/Source/WebCore/html/HTMLTextAreaElement.cpp
+++ b/Source/WebCore/html/HTMLTextAreaElement.cpp
@@ -284,13 +284,14 @@ void HTMLTextAreaElement::defaultEventHandler(Event& event)
 
 void HTMLTextAreaElement::subtreeHasChanged()
 {
-    setChangedSinceLastFormControlChangeEvent(true);
     setFormControlValueMatchesRenderer(false);
     updateValidity();
 
     if (!focused())
         return;
 
+    setChangedSinceLastFormControlChangeEvent(true);
+
     if (RefPtr<Frame> frame = document().frame())
         frame->editor().textDidChangeInTextArea(this);
     // When typing in a textarea, childrenChanged is not called, so we need to force the directionality check.
-- 
2.30.2