Take offsets into account for reflowed floating divs (relative positioning rework bugfix)
Always disable FF compatmode on Facebook to prevent CSP violation errors.
Move AMO UA override to firefox.js + pass on the OS
Limit CSP cache key size
Bug 607067 CSP violation messages for base restrictions are awful
Bug 909241 - Remove console logging from sendReports() and into its own function, logToConsole()
Implement multi-policy CSP (CSP 1.0 spec)
Update tests for multi-policy CSP
Bug 916881 - Remove stray refinePolicy entry in CSPUtils.jsm
Bug 925186 - Prioritize CSP 1.0 headers over X-CSP headers
Don't return early when "*" is found (breaks "style-src * 'unsafe-inline'" etc.)
Fix Bug #916881 bustage: add missing parenthesis
Revert "Always disable FF compatmode on Facebook to prevent CSP violation errors."

This reverts commit 35d04f15099503eef9dfe99ff20850a21bd720a9.
CSP1.0 sec fix: Treat XSLT as script, not as style, in accordance with the spec.
(CVE-2014-1485)
Merge branch 'CSP-work'
Version bump
Prevent errors about incomplete e10s webNavigation when opening a new browser window
Give user control over media sharing.
Bug 1062981 (CVE-2014-1586) Navigating away from a page with camera sharing in an iframe leaves camera recording.
Bug 1068218 - (CVE-2014-1581)