Revert 180341 "input[type=date] warns if specified string is inv..."

> input[type=date] warns if specified string is invalid.
> 
> We show a console message if:
>  - An invalid string is set to 'value' IDL attribute.
>  - An invalid string is set to 'value' content attribute.
>  - 'date' is set to 'type' attribute and existing 'value' content attribute is
>    invalid.
>  - 'date' is set to 'type' attribute and existing user-specified value is
>    invalid.
> 
> BUG=397952
> TEST=Update expectations of automated tests.
> 
> Review URL: https://codereview.chromium.org/461323006

TBR=tkent@chromium.org
BUG=397952,405227

Review URL: https://codereview.chromium.org/492123002

git-svn-id: svn://svn.chromium.org/blink/branches/chromium/2125@180690 bbb929c8-8fbe-4397-9dbb-9b2b20218538
Merge 180449 "DevTools: NetworkPanel: get rid of stripes gradient."

> DevTools: NetworkPanel: get rid of stripes gradient.
> 
> Rendering gradient consumes considerable amount of time.
> 
> BUG=316092
> 
> Review URL: https://codereview.chromium.org/440853002

TBR=eustas@chromium.org

Review URL: https://codereview.chromium.org/495893002

git-svn-id: svn://svn.chromium.org/blink/branches/chromium/2125@180698 bbb929c8-8fbe-4397-9dbb-9b2b20218538
Merge 180446 "[DevTools] Show focus outline for inputs everywher..."

> [DevTools] Show focus outline for inputs everywhere except dialogs.
> 
> BUG=398840
> 
> Review URL: https://codereview.chromium.org/483663002

TBR=dgozman@chromium.org

Review URL: https://codereview.chromium.org/496653002

git-svn-id: svn://svn.chromium.org/blink/branches/chromium/2125@180704 bbb929c8-8fbe-4397-9dbb-9b2b20218538
Merge 180528 "Oilpan: Fix conservative marking of objects with u..."

> Oilpan: Fix conservative marking of objects with uninitialized vtables.
> 
> I used Visitor::markNoTracing but that is only implemented for
> the object pointer and not for header pointers. This change
> implements markNoTracing for header pointers and adds a regression
> test.
> 
> R=oilpan-reviews@chromium.org, wibling@chromium.org, zerny@chromium.org
> BUG=404511
> 
> Review URL: https://codereview.chromium.org/487683002

TBR=ager@chromium.org

Review URL: https://codereview.chromium.org/495303002

git-svn-id: svn://svn.chromium.org/blink/branches/chromium/2125@180761 bbb929c8-8fbe-4397-9dbb-9b2b20218538
Merge 180413 "DevTools: [CodeMirror] handle new-lines in error p..."

> DevTools: [CodeMirror] handle new-lines in error popovers
> 
> Add support to new-line character handling in error and warning console
> message texts which are shown in a popover in editor.
> 
> BUG=404380
> R=vsevik
> 
> Review URL: https://codereview.chromium.org/478963002

TBR=lushnikov@chromium.org

Review URL: https://codereview.chromium.org/469643003

git-svn-id: svn://svn.chromium.org/blink/branches/chromium/2125@180772 bbb929c8-8fbe-4397-9dbb-9b2b20218538
Merge 180686 "Minimal fix to gesture event frame targetting"

> Minimal fix to gesture event frame targetting
> 
> We intended to handle gesture events in the frame of the best touch
> adjustment node.  But HitTestResult::resolveRectBaseTest failed to
> update the m_innerNonSharedNode field, leaving just the last candidate
> from the rect-based hit test.  EventHandler::handleGestureEvent then
> ended up using this via HitTestResult::innerNodeFrame() sending events
> to possibly the incorrect frame.
> 
> This is a low-risk fix for merging back to M38 which just sets the
> missing m_innerNonSharedNode field.  But there are deeper pre-existing
> issues here that I plan to fix shortly - I've summarized them with
> FIXME comments.
> 
> BUG=401504
> 
> Review URL: https://codereview.chromium.org/487663003

TBR=rbyers@chromium.org

Review URL: https://codereview.chromium.org/503433002

git-svn-id: svn://svn.chromium.org/blink/branches/chromium/2125@180786 bbb929c8-8fbe-4397-9dbb-9b2b20218538
Merge 180539 "Windows: Fix crash by starting pan-scrolling when ..."

> Windows: Fix crash by starting pan-scrolling when render tree needs to be updated.
> 
> It's possible that RenderBox::canBeScrolledAndHasScrollableArea()
> modifies render tree and the |while| loop in Node::defaultEventHandler
> is confused. We should make sure render tree is up-to-date before the
> loop.
> 
> BUG=401362
> 
> Review URL: https://codereview.chromium.org/471373002

TBR=tkent@chromium.org

Review URL: https://codereview.chromium.org/502823002

git-svn-id: svn://svn.chromium.org/blink/branches/chromium/2125@180836 bbb929c8-8fbe-4397-9dbb-9b2b20218538
Merge 180688 "Don't require main-thread scrolling for Gmail"

> Don't require main-thread scrolling for Gmail
> 
> In Gmail, the FrameView doesn't scroll, which means we don't create a
> composited layer for fixed position elements. However, when checking for
> main-thread scrolling reasons, we'd notice these non-composited fixed-position
> elements and think that meant we needed main-thread scrolling.
> 
> This CL skips the check for non-composited fixed-position elements if the
> FrameView isn't scrollable. If the FrameView isn't scrollable, there's no
> reason to force main thread scrolling in this case.
> 
> R=vollick@chromium.org
> BUG=404332
> 
> Review URL: https://codereview.chromium.org/480573007

TBR=abarth@chromium.org

Review URL: https://codereview.chromium.org/499973002

git-svn-id: svn://svn.chromium.org/blink/branches/chromium/2125@180841 bbb929c8-8fbe-4397-9dbb-9b2b20218538
Merge 180554 "Revert of [XHR] Reduce 'readystatechange' event fi..."

> Revert of [XHR] Reduce 'readystatechange' event firing. (patchset #9 of https://codereview.chromium.org/428473005/)
> 
> Reason for revert:
> This change breaks legacy applications.
> 
> Original issue's description:
> > [XHR] Reduce 'readystatechange' event firing.
> > 
> > Currently too many readystatechange events are fired and
> > it hurts performance.
> > 
> > BUG=336066
> > 
> > Committed: https://src.chromium.org/viewvc/blink?view=rev&revision=179381
> 
> Review URL: https://codereview.chromium.org/486133002

TBR=yhirano@chromium.org, matthewyuan@chromium.org

Review URL: https://codereview.chromium.org/499273002

git-svn-id: svn://svn.chromium.org/blink/branches/chromium/2125@180845 bbb929c8-8fbe-4397-9dbb-9b2b20218538
Merge 180579 "Fix mapRectToPaintInvalidationBacking() wrong callers"

> Fix mapRectToPaintInvalidationBacking() wrong callers
> 
> Previously the callers called mapRectToPaintInvalidationBacking with
> wrong parameters (passing paintInvalidationState pointer as 'bool fixed'
> and the actual paintInvalidationState was 0).
> 
> As the 'bool fixed' parameter is only meaningful for RenderView, this
> change removed the parameter from mapRectToPaintInvalidationBacking,
> added RenderView::mapRectToPaintInvalidationBackingOfView() and let
> RenderBox call the latter when the container is RenderView.
> 
> For previous wrong callers,
> - RenderInline: disable paintInvalidationState offset caching because of
>   crbug.com/402994
> - RenderLayer: disable paintInvalidationState offset caching because of
>   crbug.com/402983
> 
> The change in RenderInline fixes bug 402362. Previously as the 'fixed'
> parameter was wrongly passed as 'true', the scroll offset of the view was
> wrongly added to the repaint rect of some inlines.
> 
> BUG=403979,402994,402983
> TEST=fast/repaint/inline-style-change-in-scrolled-view.html
> TEST=svg/repaint/repaint-in-scrolled-view.html
> 
> Review URL: https://codereview.chromium.org/455253003

TBR=wangxianzhu@chromium.org

Review URL: https://codereview.chromium.org/504913002

git-svn-id: svn://svn.chromium.org/blink/branches/chromium/2125@180859 bbb929c8-8fbe-4397-9dbb-9b2b20218538
Revert 180046 "Oilpan: Move more code of RenderObject destructor..."

Reason for revert:
Caused crashes in ImageQualityController::highQualityRepaintTimerFired().

> Oilpan: Move more code of RenderObject destructors to destroy().
> 
> Like [1] and [2]. We should do it in general.
> 
> [1] http://src.chromium.org/viewvc/blink?view=revision&revision=180023
> [2] http://src.chromium.org/viewvc/blink?view=revision&revision=180029
> 
> BUG=398342
> 
> Review URL: https://codereview.chromium.org/459353002

TBR=tkent@chromium.org
BUG=404529

Review URL: https://codereview.chromium.org/492183003

git-svn-id: svn://svn.chromium.org/blink/branches/chromium/2125@180871 bbb929c8-8fbe-4397-9dbb-9b2b20218538
[TEMP][IVI] WebGL: Turn off MSAA.

MSAA is disabled for now and will be enabled once known issues are fixed for IVI.

BUG=https://crosswalk-project.org/jira/browse/XWALK-1113