fix: bound rich editor hidden-ancestor walk to avoid cross-form binds

The hidden-element fallback in detectAndMark used to climb to
document.body looking for a nearby editor, so calling fillField on an
unrelated hidden input could accidentally bind it to any editor on the
same page. Cap the ancestor walk at 3 levels (covers CKE4 / Summernote /
TinyMCE-legacy wrapper depth of 1-2 with margin) and skip the walk
entirely for <input type=\"hidden\"> since those are form-state inputs,
not editor-backing elements.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

Author: DavertMik

lib/helper/extras/richTextEditor.js

@@ -13,6 +13,7 @@ function detectAndMark(el, opts) {
   const marker = opts.marker
   const kinds = opts.kinds
   const CE = '[contenteditable="true"], [contenteditable=""]'
+  const MAX_HIDDEN_ASCENT = 3
 
   function mark(kind, target) {
     document.querySelectorAll('[' + marker + ']').forEach(n => n.removeAttribute(marker))
@@ -26,7 +27,8 @@ function detectAndMark(el, opts) {
   if (tag === 'IFRAME') return mark(kinds.IFRAME, el)
   if (el.isContentEditable) return mark(kinds.CONTENTEDITABLE, el)
 
-  if (tag !== 'INPUT' && tag !== 'TEXTAREA') {
+  const canSearchDescendants = tag !== 'INPUT' && tag !== 'TEXTAREA'
+  if (canSearchDescendants) {
     const iframe = el.querySelector('iframe')
     if (iframe) return mark(kinds.IFRAME, iframe)
     const ce = el.querySelector(CE)
@@ -36,25 +38,24 @@ function detectAndMark(el, opts) {
   }
 
   const style = window.getComputedStyle(el)
-  const hidden =
+  const isHidden =
     el.offsetParent === null ||
     (el.offsetWidth === 0 && el.offsetHeight === 0) ||
     style.display === 'none' ||
     style.visibility === 'hidden'
-
-  if (hidden) {
-    let scope = el.parentElement
-    while (scope) {
-      const iframeNear = scope.querySelector('iframe')
-      if (iframeNear) return mark(kinds.IFRAME, iframeNear)
-      const ceNear = scope.querySelector(CE)
-      if (ceNear) return mark(kinds.CONTENTEDITABLE, ceNear)
-      for (const t of scope.querySelectorAll('textarea')) {
-        if (t !== el) return mark(kinds.HIDDEN_TEXTAREA, t)
-      }
-      if (scope === document.body) break
-      scope = scope.parentElement
-    }
+  if (!isHidden) return mark(kinds.STANDARD, el)
+
+  const isFormHidden = tag === 'INPUT' && el.type === 'hidden'
+  if (isFormHidden) return mark(kinds.STANDARD, el)
+
+  let scope = el.parentElement
+  for (let depth = 0; scope && depth < MAX_HIDDEN_ASCENT; depth++, scope = scope.parentElement) {
+    const iframeNear = scope.querySelector('iframe')
+    if (iframeNear) return mark(kinds.IFRAME, iframeNear)
+    const ceNear = scope.querySelector(CE)
+    if (ceNear) return mark(kinds.CONTENTEDITABLE, ceNear)
+    const textareaNear = [...scope.querySelectorAll('textarea')].find(t => t !== el)
+    if (textareaNear) return mark(kinds.HIDDEN_TEXTAREA, textareaNear)
   }
 
   return mark(kinds.STANDARD, el)