Fix fingerprinting of table cells.

BUG=322340

Review URL: https://codereview.chromium.org/183763045

git-svn-id: svn://svn.chromium.org/blink/trunk@169197 bbb929c8-8fbe-4397-9dbb-9b2b20218538
Fix crash when the value of input[type=color] with an author ShadowRoot is updated.

We should not call ColorInputType::updateColorSwatch directly from
ColorInputType because it is view-related. This CL renames updateColorSwatch to
updateView, and replace updateColorSwatch callsites with element().updateView()
to use null InputTypeView::updateView when an author ShadowRoot is attached.

BUG=351880
TEST=automated

Review URL: https://codereview.chromium.org/198813002

git-svn-id: svn://svn.chromium.org/blink/trunk@169198 bbb929c8-8fbe-4397-9dbb-9b2b20218538
Fix the broken menulist-oninput-fired.html test

Review URL: https://codereview.chromium.org/195943006

git-svn-id: svn://svn.chromium.org/blink/trunk@169199 bbb929c8-8fbe-4397-9dbb-9b2b20218538
[SVG] SVGImage destructor crash.

An SVGImage object can be deleted before having a chance to instantiate
its ChromeClient and Page (before all data is received - if the
connection gets reset for example).

The destructor needs to guard access to m_page and m_chromeClient.

BUG=350791
R=pdr@chromium.org,fs@opera.com,kouhei@chromium.org

Review URL: https://codereview.chromium.org/197233003

git-svn-id: svn://svn.chromium.org/blink/trunk@169200 bbb929c8-8fbe-4397-9dbb-9b2b20218538
Ship Shadow DOM

Intent to Ship thread: https://groups.google.com/a/chromium.org/forum/#!topic/blink-dev/ay9tVGRa8Rg

BUG=336121

Review URL: https://codereview.chromium.org/153483002

git-svn-id: svn://svn.chromium.org/blink/trunk@169201 bbb929c8-8fbe-4397-9dbb-9b2b20218538
Remove unused member functions of FormSubmission class.

This CL removes:
 - contentType
 - boundary
 - referrer
 - origin

BUG=none
TEST=none; no behavior changes

Review URL: https://codereview.chromium.org/195943019

git-svn-id: svn://svn.chromium.org/blink/trunk@169202 bbb929c8-8fbe-4397-9dbb-9b2b20218538
Clean up FormState class.

- Remove unused m_textFieldValues and related code.
- Remove Document argument of the constructor
  It's always the owner Document of another argument.
- Make PassRefPtr<HTMLFormElement> argument a reference.
  We don't need to use PassRefPtr here, and the argument is always non-null.
- Remove unnecessary #include "FormState.h".

BUG=none
TEST=none; no behavior changes.

Needs rebase later

Review URL: https://codereview.chromium.org/198853003

git-svn-id: svn://svn.chromium.org/blink/trunk@169203 bbb929c8-8fbe-4397-9dbb-9b2b20218538
Add test for http://trac.webkit.org/changeset/136277

In studying RenderView::repaintViewAndCompositedLayers, we realized we were
missing test coverage for it. This CL tests that it's working properly.

R=esprehn@chromium.org

Review URL: https://codereview.chromium.org/197073009

git-svn-id: svn://svn.chromium.org/blink/trunk@169204 bbb929c8-8fbe-4397-9dbb-9b2b20218538
[WebSocket] Rebase extensions Layout test.

Re-enable other passing layout tests as well.

BUG=339373
R=ricea@chromium.org

Review URL: https://codereview.chromium.org/199833002

git-svn-id: svn://svn.chromium.org/blink/trunk@169205 bbb929c8-8fbe-4397-9dbb-9b2b20218538