aura: Fix a crash related to nested event-dispatch.

If events are being dispatched from a nested message-loop, and the target of the
outer loop is hidden or moved to another dispatcher during dispatching events in
the inner loop, then reset the target for the outer loop.

BUG=347012
R=sky@chromium.org

Review URL: https://codereview.chromium.org/180973007

git-svn-id: svn://svn.chromium.org/chrome/trunk/src@254150 0039d316-1c4b-4281-b951-d872f2087c98
SVN changes up to revision 254150
Correctly delete RenderWidgetHostViewChildFrame on process crash

When a child frame process crashes, the RenderWidgetHostView was
not getting destroyed as it should have been. This patch fixes
the memory leak.

TEST=SitePerProcessBrowserTest.CrashSubframe passes without a leak
BUG=343883
R=creis@chromium.org

Review URL: https://codereview.chromium.org/178993005

git-svn-id: svn://svn.chromium.org/chrome/trunk/src@254151 0039d316-1c4b-4281-b951-d872f2087c98
SVN changes up to revision 254151