Add a test to ensure SelectElement removes an option when null is assigned by indexed setter
https://bugs.webkit.org/show_bug.cgi?id=119311

Reviewed by Alexey Proskuryakov.

Merge a test in https://chromium.googlesource.com/chromium/blink/+/da5c8d908b87f75c5ba3d1457c2353642e999963
even though the regression never existed in WebKit.

* fast/forms/select/select-assign-null-expected.txt: Added.
* fast/forms/select/select-assign-null.html: Added.


git-svn-id: http://svn.webkit.org/repository/webkit/trunk@153525 268f45cc-cd09-0410-ab3c-d52691b4dbfc
Test assignment to indexed window properties
https://bugs.webkit.org/show_bug.cgi?id=119307

Reviewed by Geoffrey Garen.

Merge https://chromium.googlesource.com/chromium/blink/+/bdeca10fa79477f669cab1e5b081a480e743fd3f

* http/tests/security/xss-DENIED-window-index-assign-expected.txt: Added.
* http/tests/security/xss-DENIED-window-index-assign.html: Added.


git-svn-id: http://svn.webkit.org/repository/webkit/trunk@153526 268f45cc-cd09-0410-ab3c-d52691b4dbfc
[Win] JavaScript crash.
https://bugs.webkit.org/show_bug.cgi?id=119339

Reviewed by Mark Hahnenberg.

* jit/JITStubsX86.h: Implement ctiVMThrowTrampoline and
ctiVMThrowTrampolineSlowpath the same way as the gcc x86 version does.


git-svn-id: http://svn.webkit.org/repository/webkit/trunk@153527 268f45cc-cd09-0410-ab3c-d52691b4dbfc
[CSS Shapes] Stop using internals in shape-outside tests
https://bugs.webkit.org/show_bug.cgi?id=119229

Reviewed by Alexandru Chiculita.

We no longer need to use window.internals for shape-outside, since it
is enabled by default on ports where it is compiled in. To make the
w3c spec test cleaner, that reference has been removed from all of the
tests.

* csswg/submitted/shapes/shape-outside/shape-outside-floats-circle-000.html:
* csswg/submitted/shapes/shape-outside/shape-outside-floats-horizontal-rectangle-000.html:
* csswg/submitted/shapes/shape-outside/shape-outside-floats-horizontal-rectangle-001-expected.html:
* csswg/submitted/shapes/shape-outside/shape-outside-floats-horizontal-rectangle-001.html:
* csswg/submitted/shapes/shape-outside/shape-outside-floats-horizontal-rectangle-002-expected.html:
* csswg/submitted/shapes/shape-outside/shape-outside-floats-horizontal-rectangle-002.html:
* csswg/submitted/shapes/shape-outside/shape-outside-floats-horizontal-rectangle-003.html:
* csswg/submitted/shapes/shape-outside/shape-outside-floats-horizontal-rectangle-004.html:
* csswg/submitted/shapes/shape-outside/shape-outside-floats-inset-rectangle-000.html:
* csswg/submitted/shapes/shape-outside/shape-outside-floats-inset-rectangle-001.html:
* csswg/submitted/shapes/shape-outside/shape-outside-floats-inset-rectangle-002.html:
* csswg/submitted/shapes/shape-outside/shape-outside-floats-polygon-000.html:
* csswg/submitted/shapes/shape-outside/shape-outside-floats-polygon-001.html:
* csswg/submitted/shapes/shape-outside/shape-outside-floats-polygon-002.html:
* csswg/submitted/shapes/shape-outside/shape-outside-floats-rounded-rectangle-001.html:
* csswg/submitted/shapes/shape-outside/shape-outside-floats-rounded-rectangle-002.html:
* csswg/submitted/shapes/shape-outside/shape-outside-floats-rounded-rectangle-003.html:
* csswg/submitted/shapes/shape-outside/shape-outside-floats-rounded-rectangle-004.html:
* csswg/submitted/shapes/shape-outside/shape-outside-floats-square-000.html:
* csswg/submitted/shapes/shape-outside/shape-outside-floats-square-border-000.html:
* csswg/submitted/shapes/shape-outside/shape-outside-floats-vertical-rectangle-000.html:
* csswg/submitted/shapes/shape-outside/shape-outside-floats-vertical-rectangle-001-expected.html:
* csswg/submitted/shapes/shape-outside/shape-outside-floats-vertical-rectangle-001.html:
* csswg/submitted/shapes/shape-outside/shape-outside-floats-vertical-rectangle-002-expected.html:
* csswg/submitted/shapes/shape-outside/shape-outside-floats-vertical-rectangle-002.html:
* csswg/submitted/shapes/shape-outside/w3c-import.log:


git-svn-id: http://svn.webkit.org/repository/webkit/trunk@153528 268f45cc-cd09-0410-ab3c-d52691b4dbfc
Convert most callers of setInlineStyleProperty passing strings to enums or doubles instead
https://bugs.webkit.org/show_bug.cgi?id=119304

Reviewed by Andreas Kling.

Merge https://chromium.googlesource.com/chromium/blink/+/8157dd9381716759f183fabbfed29c52962be746

* editing/DeleteButtonController.cpp:
(WebCore::DeleteButtonController::createDeletionUI):
(WebCore::DeleteButtonController::show):
* html/HTMLTextFormControlElement.cpp:
(WebCore::HTMLTextFormControlElement::updatePlaceholderVisibility):
* html/ImageDocument.cpp:
(WebCore::ImageDocument::resizeImageToFit):
(WebCore::ImageDocument::restoreImageSize):
(WebCore::ImageDocument::windowSizeChanged):
* html/shadow/MediaControlElements.cpp:
(WebCore::MediaControlTextTrackContainerElement::updateDisplay):
(WebCore::MediaControlTextTrackContainerElement::updateTimerFired):
* html/track/TextTrackCue.cpp:
(WebCore::TextTrackCue::setFontSize):
* html/track/TextTrackCueGeneric.cpp:
(WebCore::TextTrackCueGenericBoxElement::applyCSSProperties):
(WebCore::TextTrackCueGeneric::setFontSize):
* rendering/RenderLayer.cpp:
(WebCore::RenderLayer::resize):


git-svn-id: http://svn.webkit.org/repository/webkit/trunk@153529 268f45cc-cd09-0410-ab3c-d52691b4dbfc
Avoid calling nextRenderer() in some cases
https://bugs.webkit.org/show_bug.cgi?id=119313

Reviewed by Andreas Kling.

Merge https://chromium.googlesource.com/chromium/blink/+/3207cfda52082f4fd6a04c7819c18a980de58beb.

* dom/Text.cpp:
(WebCore::Text::textRendererIsNeeded):


git-svn-id: http://svn.webkit.org/repository/webkit/trunk@153530 268f45cc-cd09-0410-ab3c-d52691b4dbfc
        REGRESSION (r153406): DOM intervals are not properly restarted when resumed
        https://bugs.webkit.org/show_bug.cgi?id=119345

        Reviewed by Sam Weinig.

        * page/SuspendableTimer.cpp: (WebCore::SuspendableTimer::suspend): Call base class
        version of repeatInterval(), not our version that will just return the current value
        of m_savedRepeatInterval in this situation.



git-svn-id: http://svn.webkit.org/repository/webkit/trunk@153531 268f45cc-cd09-0410-ab3c-d52691b4dbfc