Bug 903106, <tr>.sectionRowIndex crashes, r=dz
Bug 902695 - Implement openURIInFrame in nsBrowserAccess (r=felipe)
Bug 901455 - IonMonkey: Fix order of initialization of Ranges. r=sunfish