From e5f2fbdcb2b473997ec79a8486b7af5e90d644ef Mon Sep 17 00:00:00 2001
From: Karl Seguin <k@openmymind.io>
Date: Fri, 9 Jan 2026 14:37:34 +0800
Subject: [PATCH] clear isTrusted on redispatch and prevent redispatching while
 dispatching

---
 src/browser/webapi/EventTarget.zig | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/src/browser/webapi/EventTarget.zig b/src/browser/webapi/EventTarget.zig
index ff3d060a..1c75b0f0 100644
--- a/src/browser/webapi/EventTarget.zig
+++ b/src/browser/webapi/EventTarget.zig
@@ -51,6 +51,10 @@ pub fn init(page: *Page) !*EventTarget {
 }
 
 pub fn dispatchEvent(self: *EventTarget, event: *Event, page: *Page) !bool {
+    if (event._event_phase != .none) {
+        return error.InvalidStateError;
+    }
+    event._isTrusted = false;
     try page._event_manager.dispatch(self, event);
     return !event._cancelable or !event._prevent_default;
 }
@@ -158,7 +162,7 @@ pub const JsApi = struct {
     };
 
     pub const constructor = bridge.constructor(EventTarget.init, .{});
-    pub const dispatchEvent = bridge.function(EventTarget.dispatchEvent, .{});
+    pub const dispatchEvent = bridge.function(EventTarget.dispatchEvent, .{ .dom_exception = true });
     pub const addEventListener = bridge.function(EventTarget.addEventListener, .{});
     pub const removeEventListener = bridge.function(EventTarget.removeEventListener, .{});
 };