From a7b3731d675041cccf0bcb91a74469bf74ffdb79 Mon Sep 17 00:00:00 2001
From: "bzbarsky%mit.edu"
 <bzbarsky%mit.edu@18797224-902f-48f8-a5cc-f745e15eee43>
Date: Mon, 10 May 2004 21:04:18 +0000
Subject: [PATCH] The saga continues.  Don't move around <script>, since that
 breaks pages... Bug 243064, r+sr=jst

git-svn-id: svn://10.0.0.236/trunk@156206 18797224-902f-48f8-a5cc-f745e15eee43
---
 mozilla/parser/htmlparser/src/CNavDTD.cpp | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/mozilla/parser/htmlparser/src/CNavDTD.cpp b/mozilla/parser/htmlparser/src/CNavDTD.cpp
index 3cd1ec90712..99d26970c66 100644
--- a/mozilla/parser/htmlparser/src/CNavDTD.cpp
+++ b/mozilla/parser/htmlparser/src/CNavDTD.cpp
@@ -923,8 +923,10 @@ nsresult CNavDTD::HandleToken(CToken* aToken,nsIParser* aParser){
             // illegal here so they'll be shipped out with their parents and
             // siblings.  See bug 40855 for an explanation (that bug was for
             // comments, but the same issues arise with whitespace, newlines,
-            // noscript, scripts, etc).
-            !gHTMLElements[theTag].HasSpecialProperty(kLegalOpen))) {
+            // noscript, etc).  Script is special, though.  Shipping it out
+            // breaks document.write stuff.  See bug 243064.
+            (!gHTMLElements[theTag].HasSpecialProperty(kLegalOpen) ||
+             theTag == eHTMLTag_script))) {
             
           mFlags &= ~NS_DTD_FLAG_MISPLACED_CONTENT; // reset the state since all the misplaced tokens are about to get handled.