Webkit: Applying direction to certian table selection ruins the table

[Sa'ar Zac Elias]

• Using the following (note: the text "aa" is not selected)

  <table border="1">
  	<tbody>
  		<tr>
  			<td>
  				aa[</td>
  			<td>
  				bb</td>
  		</tr>
  		<tr>
  			<td>
  				cc</td>
  			<td>
  				dd]</td>
  		</tr>
  	</tbody>
  </table>
  

• Click the RTL icon.

Note that the table is corrupted.

[Sa'ar Zac Elias]

Clarification of the selection

[Sa'ar Zac Elias]

Regression of [6333].

[Garry Yao]

Affects all browsers, not a regression, but just get accidentally revealed by [6663].

[Garry Yao]

Fixed with [6368].