merge_pr_49029

Fix nested traversals

Multiple crashes were occurring due to inconsistencies between option
traversals. OptionList was not considering nested s to be
associated with the select. However, HTMLOptionElement::InsertedInto and
HTMLOptionElement::OwnerSelectElement were considering nested s
to be associated with selects.

This patch makes the traversals consistent by disallowing nested

s from creating associations with elements. Fixed: 376786406 Change-Id: Ia6e4cc7d028033885b452efe03687638446350ab Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/5990895 Commit-Queue: Joey Arhar [email protected] Reviewed-by: David Baron [email protected] Cr-Commit-Position: refs/heads/main@{#1379764}