Bug 866580 - Assertion redefining the length property on a frozen array.  r=bhackett

--HG--
extra : rebase_source : 8bba3b33a92ef41738bfd465e6cc101189220ecb
Bug 866700 - Assertion when redefining a non-writable length to a non-numeric value.  r=bhackett
Bug 808596 - Introduce key role. r=surkov
Bug 862996: Put text headings back in the tab menu. [r=mfinkle]
Bug 717637.  Stop using non-global parent objects for everything that's not an element, since having a mix of parent objects makes us fail shape guards in the JIT.  r=peterv
Bug 865961.  Root the scope argument of wrap-the-xpconnect-object helpers in WebIDL bindings.  r=ms2ger
Bug 865947 - Force all string event handlers to be evaluated in the content scope. r=jaws,bz