Unreviewed. Added new baselines for some of editing/style tests, which works on EFL port.

* platform/efl/TestExpectations:
* platform/efl/editing/style/5017613-1-expected.png: Added.
* platform/efl/editing/style/5017613-1-expected.txt: Added.
* platform/efl/editing/style/5046875-1-expected.png: Added.
* platform/efl/editing/style/5046875-1-expected.txt: Added.
* platform/efl/editing/style/5065910-expected.png: Added.
* platform/efl/editing/style/5065910-expected.txt: Added.
* platform/efl/editing/style/5228141-expected.png: Added.
* platform/efl/editing/style/5228141-expected.txt: Added.
* platform/efl/editing/style/5279521-expected.png: Added.
* platform/efl/editing/style/5279521-expected.txt: Added.

git-svn-id: http://svn.webkit.org/repository/webkit/trunk@151626 268f45cc-cd09-0410-ab3c-d52691b4dbfc
Fix two assertion failures in Range::insertNode
https://bugs.webkit.org/show_bug.cgi?id=116511

Reviewed by Ryosuke Niwa.

Source/WebCore:

> ASSERTION FAILED: childBefore == (offset ? container->childNode(offset - 1) : 0)
> third_party/WebKit/Source/WebCore/dom/RangeBoundaryPoint.h(115) : void WebCore::RangeBoundaryPoint::set(PassRefPtr<WebCore::Node>, int, WebCore::Node *)

> ASSERTION FAILED: child->parentNode()
> ../../third_party/WebKit/Source/core/dom/RangeBoundaryPoint.h(133) : void WebCore::RangeBoundaryPoint::setToBeforeChild(WebCore::Node *)
>  1   0x87594b2 WebCore::RangeBoundaryPoint::setToBeforeChild(WebCore::Node*)
>  2   0x87534a9 WebCore::Range::insertNode(WTF::PassRefPtr<WebCore::Node>, int&)

Range::insertNode calls Node::insertBefore, in which an event handler
can update the DOM structure so that RangeBoundaryPoint don't like. We
postpone event dispatching by EventQueueScope.

Also, remove old comments about Acid3. The behavior is standardized.
(Step 9 of http://dom.spec.whatwg.org/#dom-range-insertnode)

This patch imports http://src.chromium.org/viewvc/blink?view=revision&revision=150470 .

Test: fast/dom/Range/range-insertNode-assertion.html

* dom/Range.cpp:
(WebCore::Range::insertNode):
 - Add EventQueueScope
 - Remove obsolete comments

LayoutTests:

We need to update fast/dom/insertBefore-refChild-crash.html because the
test caused recursive calls to the event handler. container.innerHTML=''
did nothing before this CL. Now container has the newChild because
DOMNodeRemoved event dispatching is delayed until Range::insertNode
completion.

We need to update fast/text/split-text-crash.xhtml so that it doesn't
stop when the event handler is called twice. I'm not sure why the test
worked before this CL.

* fast/dom/Range/range-insertNode-assertion-expected.txt: Added.
* fast/dom/Range/range-insertNode-assertion.html: Added.
* fast/dom/insertBefore-refChild-crash.html:
* fast/text/split-text-crash.xhtml:


git-svn-id: http://svn.webkit.org/repository/webkit/trunk@151627 268f45cc-cd09-0410-ab3c-d52691b4dbfc