LayoutTests:

LayoutTests:

        Reviewed by harrison

        <http://bugzilla.opendarwin.org/show_bug.cgi?id=8117>
        REGRESSION (NativeTextField): Drag and drop text within a text input field modifies page
        <http://bugzilla.opendarwin.org/show_bug.cgi?id=7567>
        A drag and drop in DumpRenderTree copies the source, instead of cutting it

        * editing/pasteboard/drag-drop-modifies-page-expected.checksum: Added.
        * editing/pasteboard/drag-drop-modifies-page-expected.png: Added.
        * editing/pasteboard/drag-drop-modifies-page-expected.txt: Added.
        * editing/pasteboard/drag-drop-modifies-page.html: Added.

        Updated:
        * fast/lists/drag-onto-marker.html:
        * fast/lists/drag-onto-marker-expected.txt:
        * fast/lists/drag-onto-marker-expected.png:
        * fast/lists/drag-onto-marker-expected.checksum:

WebCore:

        Reviewed by harrison

        <http://bugzilla.opendarwin.org/show_bug.cgi?id=8117>
        REGRESSION (NativeTextField): Drag and drop text within a text input field modifies page

        The frame's selection is only set after all sub-commands have been
        performed.  When we send the khtmlBeforeTextInsertedEvent to the root
        editable element we were using frame->selection(), which may no longer
        be in the document.

        Had to move the construction of the ReplacementFragment to when the
        replace operation is applied, because endingSelection isn't the
        endingSelection of the last operation when the replace operation
        is constructed.

        * editing/ReplaceSelectionCommand.cpp:
        (WebCore::ReplacementFragment::ReplacementFragment):
        (WebCore::ReplaceSelectionCommand::ReplaceSelectionCommand):
        (WebCore::ReplaceSelectionCommand::doApply):
        * editing/ReplaceSelectionCommand.h:

WebKitTools:

        Reviewed by harrison

        <http://bugzilla.opendarwin.org/show_bug.cgi?id=7567>
        A drag and drop in DumpRenderTree copies the source, instead of cutting it

        Tell the source that the drag is over after the drag is performed, not before.

        * DumpRenderTree/EventSendingController.m:
        (-[EventSendingController mouseUp]):

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@13664 268f45cc-cd09-0410-ab3c-d52691b4dbfc