Bug 883313 - Fix nsHTMLDocument::SetBody to call either ReplaceChild or AppendChild, not both. r=smaug.
Bug 888117 - Properly barrier the JSON stringifier's CycleDetection set; r=billm

--HG--
extra : rebase_source : 9cd269cf38bacfb63cbceef5dec795da2c24750c
Bug 891340 - Make Range.collapse optional and default to false