Bug 836968 - Cache shapes for JSON objects and assign types to constructed JSON objects and arrays, r=waldo,jandem.
Bug 847002 - Guard against going into codepaths that assume GetLayerManager doesn't return null. r=Cwiiis
Back out d501d97c05a6 (bug 847002) because it doesn't help. r=me
Bug 847589 - Paris binding for AnimationEvent, r=Ms2ger

--HG--
extra : rebase_source : abe968ca08b2f2bed4355e1fd69ea4f005689fd8
Bug 847599 - Paris binding for TransitionEvent, r=Ms2ger

--HG--
extra : rebase_source : ac215dccab4fcf5a802669584eaa71168a73e085
Bug 847586 - Paris binding for MutationEvent, r=Ms2ger

--HG--
extra : rebase_source : ce847b7cef923334274474e34db66158c110646c
Backed out changeset ea13caf078a7 (bug 847586)
Backed out changeset 6ab8497cb00f (bug 847599)
Backed out changeset 46ba7eb77ae1 (bug 847589) for crashes on a CLOSED TREE
Bug 850964 - Remove obsolete NS_FRAME_INVALIDATE_ON_MOVE flag.  r=roc
Bug 847208 - Make RemoveFloat() check the PushedFloatsList too.  r=dbaron
Bug 847208 - Reuse RemoveFloat() in a couple of places that did manual removal of a float child frame.  r=dbaron
Bug 822259 - Robocop: Add test for Find in Page feature. r=jmaher
Bug 820524 - Debugger, Web Console and Profiler should share the debugger client even for local sessions; r=jwalker,vporof,msucan,anton
Bug 848141 - "Translation file "toolbox.properties" has no license block" [r=past]
Bug 823938 - Intermittent browser_inspector_initialization.js | Right node is highlighted - Got [object HTMLDivElement], expected [object HTMLSpanElement], r=paul
Bug 766001 - In the webconsole, when you click on the filename/line-number of a js-error or message, the debugger should open instead of view source. r=past,msucan,vporof f=rcampbell
Bug 849067 - Unbreak gstreamer builds again. r=cpearce
Bug 844452 - Box boolean inputs on MCompare-strings. r=dvander
Bug 570896:  Allow separate background-origin and background-clip to be set in the background shorthand.  r=bzbarsky