Bug 1070962 - Part 1: Register IonBailoutIterator on the JitActivation. r=jandem, a=abillings
Bug 1070962 - Part 2: Remove GetTopIonJSScript overloads. r=jandem, a=abillings
Bug 1070962 - Part 3: Ensure consistent construction of JitFrameIterator. r=jandem, a=abillings
Bug 1070962 - Part 4: JitFrameIterator use BailoutData when it starts on a bailout frame. r=jandem, a=abillings
Bug 1070962 - Part 5: RematerializeFrames no longer use IonBailoutIterator. r=jandem, a=abillings
Bug 1070962 - Part 6: IonBailoutIterator no longer inherit from JitFrameIterator. r=jandem, a=abillings
Bug 1083629 - Use nsHTMLEditor::IsAcceptableInputEvent() instead of nsEditor::IsDescendantOfEditorRoot() for checking if a mouse down event target is in focused HTML editor. r=ehsan, a=lsblakk
Bug 1084158 - Update pdf.js to version 1.0.907. r=bdahl, r=Mossop, a=lsblakk
Bug 1084423 - Fix guards to limit wifi and cellular data per location. r=vng, a=lsblakk

Without these size guards in place, can result in excessively large collections for a single location.
Bug 1084140 - Put back mozilla/ArrayUtils.h after bug 1073998: one trivial data array is still left. r=kinetik, a=lsblakk
Bug 1081959 - "Something went wrong" isn't displayed when the call fails in the connection phase. r=dmose, a=lmandel
Bug 1062335 - Loop panel size increases after switching themes. r=mixedpuppy, a=lmandel
Bug 1084545 - Update nav button stroke colors. r=lucasr, a=lsblakk
Bug 1084557 - Stumbler: Remove condition to only build in nightly. r=rnewman, a=lsblakk
Bug 1083241 - Call gfx->Paint in PaintFrameWithEffects when there is blending. r=roc, a=lsblakk