Bug 949891 - Make nsNumberControlFrame a leaf frame so that only its CreateAnonymousContent method can create child frames. r=dholbert
Bug 949134 - Use the default step for <input type=number>'s spin buttons if step='any'. r=smaug