Correctly handle CORS access checks over cache-validating responses.

If a CORS-enabled load of a resource is also done conditionally, the
response may be a 304 (Not Modified.) That 304 response is not
required (nor expected) to have any CORS headers included, so arrange
for the required CORS access control check to be performed over the
cached resource having been (successfully) validated.

R=
BUG=339058
TEST=http/tests/security/script-crossorigin-fails-cross-origin-conditional

Review URL: https://codereview.chromium.org/146853003

git-svn-id: svn://svn.chromium.org/blink/trunk@166188 bbb929c8-8fbe-4397-9dbb-9b2b20218538
Add optimize_svg script

BUG=
R=vsevik@chromium.org

Review URL: https://codereview.chromium.org/148963009

git-svn-id: svn://svn.chromium.org/blink/trunk@166189 bbb929c8-8fbe-4397-9dbb-9b2b20218538
Windows: Use GrayText for disabled selected <option>.

Aura uses lighter gray for the background of inactive selection. So
the default color defined in html.css.

Note: The pixel result of listbox-appearance-basic.html looks worse
because we use darker gray for the background of inactive selection in
layout tests.

BUG=339316
TEST=automated
R=keishi@chromium.org

Review URL: https://codereview.chromium.org/149273006

git-svn-id: svn://svn.chromium.org/blink/trunk@166190 bbb929c8-8fbe-4397-9dbb-9b2b20218538