Make window.navigator property non replaceable

Make window.navigator property non replaceable non replaceable to match
the specification:
http://www.whatwg.org/specs/web-apps/current-work/multipage/browsers.html#window

The new behavior also matches the behavior of Firefox 28 and IE11.

R=arv@chromium.org, tkent@chromium.org
BUG=364512
TEST=fast/dom/Window/get-set-properties.html

Review URL: https://codereview.chromium.org/243203002

git-svn-id: svn://svn.chromium.org/blink/trunk@172091 bbb929c8-8fbe-4397-9dbb-9b2b20218538
Rename inCompositingMode to staleInCompositingMode.

Any code that reads the compositingMode bit when the dirty
bit is set is getting a stale value. We should remove
these callers. This patch has no change in behavior.
Just a rename.

Review URL: https://codereview.chromium.org/244313008

git-svn-id: svn://svn.chromium.org/blink/trunk@172092 bbb929c8-8fbe-4397-9dbb-9b2b20218538
Flush pending text after every chunk of Tokens

If you had a very slow loading page which would
hang in the middle of a text node, we would not
show the results of that text node until we
encountered the first token after that node.

This broke a web-based traceroute which used
http chunked encoding to keep the connection open
while it slowly piped the output of traceroute
over the http connection.
http://www.net.princeton.edu/cgi-bin/traceroute.pl?target=google.com&cmd=Go

This changes the behavior of our one test with a
gigantic text node by changing how the the text
is split.

I believe this also affected progressive loading of
text/plain documents.  I'm slightly surprised
no one complained.  I tested with:
http://norvig.com/big.txt
and we now progressively load that much better than
we do with dev channel chrome.

I'm not sure a good way to test this that won't be flaky.
If we encounter anything other than more text node
content in the http stream we'll immediately emit 
the pending text.  For now I'm going to presume
the one affected test is sufficient for coverage.

BUG=363974

Review URL: https://codereview.chromium.org/243823002

git-svn-id: svn://svn.chromium.org/blink/trunk@172094 bbb929c8-8fbe-4397-9dbb-9b2b20218538
Fix UMA collection of webfont CORS

We should check actual failures of webfont CORS because
|options().corsEnabled| won't set when the webfont has the same
origin.

BUG=286681

Review URL: https://codereview.chromium.org/239983002

git-svn-id: svn://svn.chromium.org/blink/trunk@172095 bbb929c8-8fbe-4397-9dbb-9b2b20218538
Oilpan: MediaValuesDynamic should not hold a strong reference to a LocalFrame.

After r171843, Oilpan bots timed-out on LayoutTests which open windows.

This was because |window.closed| was only updated after Oilpan GC after r171843.
|window.closed| is updated when ~Frame, and last reference to the Frame was held by
StyleEngine(On-heap) --> StyleResolver -> MediaQueryEval -> MediaValues -> LocalFrame.
StyleEngine is finalized on GC, so we had to wait for a GC to have |window.closed| updated.

r171843 changed MediaValues to hold a strong reference to a LocalFrame.
This patch reverts the change to avoid MediaValues being the last reference to the LocalFrame.

I think |window.closed| relying on ~Frame is bad in Oilpan-world, and we also need to change that too, but that is to be done on a follow-up patch

TESTS=fast/dom/Window/window-early-properties.html do not [ Timeout ] on ENABLE(OILPAN)
BUG=None

Review URL: https://codereview.chromium.org/244313006

git-svn-id: svn://svn.chromium.org/blink/trunk@172097 bbb929c8-8fbe-4397-9dbb-9b2b20218538