Bug 662669 - nsCharSeparatedTokenizer/nsWhiteSpaceSeparatedTokenizer should use RangedPtr; r=Waldo
Bug 901351 - Properly handle various edge cases in JSON.parse when walking/reviving the initial object tree.  r=jorendorff
Bug 907958 - Disallow |function function() {}| and similar unreadabilities.  r=jorendorff