Bug 845095 - clean up accessible/states/test_tree.xul, r=hub
Bug 847850. Redirect all display item lists to the content list inside of text control frames so no content can escape out to mingle with the rest of the page content. r=roc
Bug 847850. Test.
Bug 848421. Part 1. Handle having no frame for the body element when determining the image filter to use for drawing the page background. r=roc

Just use nsCSSRendering::FindBackground like we do everywhere else for finding the background, it handles this case correctly. Although this function is used for other images besides backgrounds, when it is called on a canvas frame it can only be for a background image.
Bug 848421. Reftest.