Properly fix use-after-free of InputTypeViews when the type attribute is modified in the change event handler.

Follow-up to https://codereview.chromium.org/1366983003/

R=tkent@chromium.org,esprehn@chromium.org
BUG=536917

Review URL: https://codereview.chromium.org/1377673002

Cr-Commit-Position: refs/heads/master@{#351244}
2 files changed