-webkit-mask-repeat: round does not work

I have fixed this by adding a separate case for RoundFill repeat in RenderBoxModelObject.

BUG=chromium:260691

Review URL: https://chromiumcodereview.appspot.com/19785003

git-svn-id: svn://svn.chromium.org/blink/trunk@156461 bbb929c8-8fbe-4397-9dbb-9b2b20218538
Auto-rebaseline for r156451

http://src.chromium.org/viewvc/blink?view=revision&revision=156451

BUG=271747
TBR=rbyers@chromium.org

Review URL: https://codereview.chromium.org/22882008

git-svn-id: svn://svn.chromium.org/blink/trunk@156462 bbb929c8-8fbe-4397-9dbb-9b2b20218538
Throw an exception when calling 'window.showModalDialog' cross-origin.

This aligns our behavior with Gecko.

This patch also does a drive-by fix of the 'window.event' setter, which
was mistakenly omitted from https://codereview.chromium.org/22991005/.

BUG=17325

Review URL: https://chromiumcodereview.appspot.com/23185007

git-svn-id: svn://svn.chromium.org/blink/trunk@156463 bbb929c8-8fbe-4397-9dbb-9b2b20218538
Refactoring: Do not do both of UI-specific things and others in one InputType function.

InputType::handleFocusEvent was used for multiple-fields focus handling in
BaseMultipleFieldsDateAndTimeInputType and secure text input handling in
PasswordInputType. The former is for a specific UI, and the latter is an
essential behavior of input[type=password]. We'd like to separate UI-specific
functions from others. So we introduce InputType::enableSecureTextInput.

Also we introduce InputType::disableSecureTextInput and
sanitizeValueInResponseToMinOrMaxAttributeChange for the same reason.

This is a preparation to support author shadow DOM for INPUT element.

BUG=274205

Review URL: https://chromiumcodereview.appspot.com/23286005

git-svn-id: svn://svn.chromium.org/blink/trunk@156464 bbb929c8-8fbe-4397-9dbb-9b2b20218538