Bug 836951 - Add mDocShell to nsSecureBrowserUIImpl. Traverse up to the root doc shell. r=bsmith,smaug
Bug 849781: IonMonkey: Only allow inlining when TypeSet of caller and callee intersects, r=nbp
Bug 847120: Move SVGFEMorphologyElement to its own file r=Ms2ger

--HG--
rename : content/svg/content/src/nsSVGFilters.cpp => content/svg/content/src/SVGFEMorphologyElement.cpp
rename : content/svg/content/src/nsSVGFilters.cpp => content/svg/content/src/SVGFEMorphologyElement.h
Bug 847120: Convert SVGFEMorphologyElement to WebIDL r=Ms2ger
Bug 847120: Move SVGFETurbulenceElement to its own file r=Ms2ger

--HG--
rename : content/svg/content/src/nsSVGFilters.cpp => content/svg/content/src/SVGFETurbulenceElement.cpp
rename : content/svg/content/src/nsSVGFilters.cpp => content/svg/content/src/SVGFETurbulenceElement.h
Bug 847120: Convert SVGFETurbulenceElement to WebIDL r=Ms2ger
Bug 854514 - Don't import SettingsChangeNotifier.jsm if the mozSettings pref is enabled. r=gwagner
Bug 852775 - use nsView::CalcWidgetBounds to compare actual and expected popup sizes.  r=tn
Bug 848672 Redesign focus handling of nsTextStore r=jimm
Backout e912de49c12b (Bug 854538) due to M5 & crashtest oranges on a CLOSED TREE
Backout 96f2990b1124 (bug 840612) due to orange on Mn. CLOSED TREE
Backed out changesets 957f2b35ce83:1799cffbba63 (bug 826093) for Android reftest-2 failures (again) on a CLOSED TREE.
Back out ee27d1d8b302 (bug 836951) for depending on a patch that's being backed out
CLOSED TREE
Back out 196fbc36c878 (bug 840388) for asserting
CLOSED TREE
Back out bd91df842f2f (bug 840388)
CLOSED TREE
Bug 848973 - Document what aFrame means in nsStyleDisplay::IsBlockInside() and friends. r=roc
Bug 854340 - Firefox for Android cannot against loop + alert attack r=wesj
Bug 839650: proxy AddTrack() to MSG thread via a custom command so we can get access to the current stream time r=ekr
Bug 854107 - Lazy load more normal JS objects r=margaret
Bug 854107 - Lazy load more notification-based objects r=margaret