XSSAuditor should strip formaction attributes from input and button elements.
https://bugs.webkit.org/show_bug.cgi?id=110975

Reviewed by Daniel Bates.

Source/WebCore:

The 'formaction' attribute of 'input' and 'button' elements is just as
dangerous as the 'action' attribute of 'form' elements. This patch
teaches the XSSAuditor how to avoid them.

Tests: http/tests/security/xssAuditor/formaction-on-button.html
       http/tests/security/xssAuditor/formaction-on-input.html

* html/parser/XSSAuditor.cpp:
(WebCore::XSSAuditor::filterStartToken):
(WebCore::XSSAuditor::filterInputToken): Added.
(WebCore::XSSAuditor::filterButtonToken): Added.
* html/parser/XSSAuditor.h:
    Create filters for 'input' and 'button' elements, which currently
    only have the effect of filtering the 'formaction' attribute.

LayoutTests:

* http/tests/security/xssAuditor/formaction-on-button-expected.txt: Added.
* http/tests/security/xssAuditor/formaction-on-button.html: Added.
* http/tests/security/xssAuditor/formaction-on-input-expected.txt: Added.
* http/tests/security/xssAuditor/formaction-on-input.html: Added.
* http/tests/security/xssAuditor/resources/echo-intertag.pl:
    Support 'showFormaction' as a new option to write out formaction values.

git-svn-id: http://svn.webkit.org/repository/webkit/trunk@144292 268f45cc-cd09-0410-ab3c-d52691b4dbfc
Unreviewed gardening, update expectation

* platform/chromium/TestExpectations:

git-svn-id: http://svn.webkit.org/repository/webkit/trunk@144293 268f45cc-cd09-0410-ab3c-d52691b4dbfc
[EFL][WTR] WTR cannot load injected bundle
https://bugs.webkit.org/show_bug.cgi?id=111063

Reviewed by Csaba Osztrogonác.

WTR was not able to load injected bundle because of undefined
symbols for AccessibilityUIElement::scrollToMakeVisible().
Adding empty implementation of this function to AccessibilityUIElementAtk.cpp
solves the problem.

* WebKitTestRunner/InjectedBundle/atk/AccessibilityUIElementAtk.cpp:
(WTR::AccessibilityUIElement::scrollToMakeVisible):

git-svn-id: http://svn.webkit.org/repository/webkit/trunk@144294 268f45cc-cd09-0410-ab3c-d52691b4dbfc
Web Inspector: class console-formatted-string renamed to console-formatted- ?
https://bugs.webkit.org/show_bug.cgi?id=110881

Reviewed by Vsevolod Vlasov.

Source/WebCore:

* inspector/front-end/ConsoleMessage.js:
(WebInspector.ConsoleMessageImpl.prototype._renderPropertyPreview):

LayoutTests:

* http/tests/inspector/console-test.js:
(initialize_ConsoleTest.InspectorTest.dumpConsoleMessages):
* inspector/console/console-object-preview-expected.txt:
* inspector/console/console-object-preview.html:


git-svn-id: http://svn.webkit.org/repository/webkit/trunk@144295 268f45cc-cd09-0410-ab3c-d52691b4dbfc