Webkit: Applying direction to certian table selection ruins the table

[Saare]

• Using the following (note: the text "aa" is not selected)

  <table border="1">
  	<tbody>
  		<tr>
  			<td>
  				aa[</td>
  			<td>
  				bb</td>
  		</tr>
  		<tr>
  			<td>
  				cc</td>
  			<td>
  				dd]</td>
  		</tr>
  	</tbody>
  </table>
  

• Click the RTL icon.

Note that the table is corrupted.

[Saare]

Clarification of the selection

[Saare]

Regression of [6333].

[garry.yao]

Affects all browsers, not a regression, but just get accidentally revealed by [6663].

[garry.yao]

Fixed with [6368].