Unreviewed build fix for EFL port.
[WebKit-https.git] / Source / WebCore / ChangeLog
index 6b8cade..57db63f 100644 (file)
+2013-09-13  Ryuan Choi  <ryuan.choi@samsung.com>
+
+        Unreviewed build fix for EFL port.
+
+        * editing/efl/EditorEfl.cpp:
+        * platform/efl/PasteboardEfl.cpp:
+        (WebCore::Pasteboard::read):
+        (WebCore::Pasteboard::write):
+
+2013-09-13  Sam Weinig  <sam@webkit.org>
+
+        Fix a few lingering ScriptStates.
+
+        Reviewed by Andy Estes.
+
+        * Modules/indexeddb/IDBCursor.cpp:
+        (WebCore::IDBCursor::update):
+        * Modules/indexeddb/IDBObjectStore.cpp:
+        (WebCore::IDBObjectStore::add):
+        (WebCore::IDBObjectStore::put):
+        * bindings/cpp/WebNativeNodeFilterCondition.cpp:
+        (WebNativeNodeFilterCondition::acceptNode):
+        * bindings/cpp/WebNativeNodeFilterCondition.h:
+        * dom/CustomElementConstructor.cpp:
+        (WebCore::CustomElementConstructor::create):
+        * dom/CustomElementConstructor.h:
+        * dom/CustomElementRegistry.cpp:
+        (WebCore::CustomElementRegistry::registerElement):
+        * dom/CustomElementRegistry.h:
+        * plugins/PluginView.cpp:
+        (WebCore::PluginView::performRequest):
+
+2013-09-13  Darin Adler  <darin@apple.com>
+
+        Rename confusingly named "runtimeObject" functions
+        https://bugs.webkit.org/show_bug.cgi?id=121339
+
+        Also CTTE: HTMLElement.
+
+        Reviewed by Sam Weinig.
+
+        * bindings/js/JSHTMLAppletElementCustom.cpp:
+        (WebCore::JSHTMLAppletElement::putDelegate): Renamed.
+        (WebCore::JSHTMLAppletElement::getCallData): Renamed.
+        * bindings/js/JSHTMLEmbedElementCustom.cpp:
+        (WebCore::JSHTMLEmbedElement::putDelegate): Renamed.
+        (WebCore::JSHTMLEmbedElement::getCallData): Renamed.
+        * bindings/js/JSHTMLObjectElementCustom.cpp:
+        (WebCore::JSHTMLObjectElement::putDelegate): Renamed.
+        (WebCore::JSHTMLObjectElement::getCallData): Renamed.
+
+        * bindings/js/JSPluginElementFunctions.cpp:
+        (WebCore::isPluginElement): Changed to take HTMLElement&.
+        (WebCore::pluginInstance): Ditto.
+        (WebCore::pluginScriptObjectFromPluginViewBase): Updated for name and type change.
+        (WebCore::pluginScriptObject): Ditto.
+        (WebCore::pluginElementPropertyGetter): Ditto.
+        (WebCore::pluginElementCustomGetOwnPropertySlot): Ditto.
+        (WebCore::pluginElementCustomPut): Ditto.
+        (WebCore::pluginElementGetCallData): Ditto.
+
+        * bindings/js/JSPluginElementFunctions.h: Updated names and types.
+
+        * bindings/objc/WebScriptObject.mm:
+        (+[WebScriptObject _convertValueToObjcValue:JSC::originRootObject:rootObject:]):
+        Updated for type change.
+        * bridge/runtime_method.cpp:
+        (JSC::callRuntimeMethod): Ditto.
+
+2013-09-13  Sam Weinig  <sam@webkit.org>
+
+        There is no need for any custom bindings for Console
+        https://bugs.webkit.org/show_bug.cgi?id=121338
+
+        Reviewed by Joseph Pecoraro.
+
+        * GNUmakefile.list.am:
+        * Target.pri:
+        * UseJSC.cmake:
+        * WebCore.vcxproj/WebCore.vcxproj:
+        * WebCore.vcxproj/WebCore.vcxproj.filters:
+        * WebCore.xcodeproj/project.pbxproj:
+        * bindings/js/JSBindingsAllInOne.cpp:
+        Remove JSConsoleCustom.cpp from project files.
+
+        * bindings/js/JSConsoleCustom.cpp:
+        Removed.
+
+        * page/Console.cpp:
+        (WebCore::Console::profile):
+        (WebCore::Console::profileEnd):
+        * page/Console.h:
+        Swap the order of the arguments to appease the bindings generator.
+
+        * page/Console.idl:
+        Add the [CallWith=ScriptState] attribute to pass the ExecState
+        and [TreatNullAs=NullString, TreatUndefinedAs=NullString] to get
+        the right stringification.
+
+2013-09-13  Sam Weinig  <sam@webkit.org>
+
+        Part 2 of Replace ScriptState with JSC::ExecState
+        https://bugs.webkit.org/show_bug.cgi?id=121336
+
+        * dom/Document.h:
+        There is no WebCore::JSC namespace!
+
+2013-09-13  Sam Weinig  <sam@webkit.org>
+
+        Replace ScriptState with JSC::ExecState
+        https://bugs.webkit.org/show_bug.cgi?id=121336
+
+        Reviewed by Darin Adler.
+
+        * Modules/indexeddb/IDBCursor.h:
+        * Modules/indexeddb/IDBObjectStore.h:
+        * bindings/js/JSInjectedScriptHostCustom.cpp:
+        * bindings/js/JSInjectedScriptManager.cpp:
+        * bindings/js/JSNodeCustom.cpp:
+        * bindings/js/JSNodeFilterCondition.h:
+        * bindings/js/ScriptController.cpp:
+        * bindings/js/ScriptDebugServer.cpp:
+        * bindings/js/ScriptDebugServer.h:
+        * bindings/js/ScriptEventListener.cpp:
+        * bindings/js/ScriptEventListener.h:
+        * bindings/js/ScriptFunctionCall.cpp:
+        * bindings/js/ScriptFunctionCall.h:
+        * bindings/js/ScriptObject.cpp:
+        * bindings/js/ScriptObject.h:
+        * bindings/js/ScriptProfiler.cpp:
+        * bindings/js/ScriptProfiler.h:
+        * bindings/js/ScriptState.cpp:
+        * bindings/js/ScriptState.h:
+        * bindings/js/ScriptValue.cpp:
+        * bindings/js/ScriptValue.h:
+        * bindings/js/SerializedScriptValue.cpp:
+        * bindings/js/SerializedScriptValue.h:
+        * dom/Document.cpp:
+        * dom/Document.h:
+        * dom/NodeFilter.cpp:
+        * dom/NodeFilter.h:
+        * dom/NodeFilterCondition.cpp:
+        * dom/NodeFilterCondition.h:
+        * dom/NodeIterator.cpp:
+        * dom/NodeIterator.h:
+        * dom/ScriptExecutionContext.cpp:
+        * dom/ScriptExecutionContext.h:
+        * dom/Traversal.cpp:
+        * dom/Traversal.h:
+        * dom/TreeWalker.cpp:
+        * dom/TreeWalker.h:
+        * inspector/ConsoleMessage.cpp:
+        * inspector/ConsoleMessage.h:
+        * inspector/InjectedScript.h:
+        * inspector/InjectedScriptBase.cpp:
+        * inspector/InjectedScriptBase.h:
+        * inspector/InjectedScriptCanvasModule.cpp:
+        * inspector/InjectedScriptCanvasModule.h:
+        * inspector/InjectedScriptHost.cpp:
+        * inspector/InjectedScriptHost.h:
+        * inspector/InjectedScriptManager.cpp:
+        * inspector/InjectedScriptManager.h:
+        * inspector/InjectedScriptModule.cpp:
+        * inspector/InjectedScriptModule.h:
+        * inspector/InspectorAgent.cpp:
+        * inspector/InspectorCanvasAgent.cpp:
+        * inspector/InspectorCanvasAgent.h:
+        * inspector/InspectorConsoleAgent.cpp:
+        * inspector/InspectorConsoleAgent.h:
+        * inspector/InspectorConsoleInstrumentation.h:
+        * inspector/InspectorDOMAgent.cpp:
+        * inspector/InspectorDebuggerAgent.cpp:
+        * inspector/InspectorDebuggerAgent.h:
+        * inspector/InspectorFrontendClientLocal.cpp:
+        * inspector/InspectorFrontendHost.cpp:
+        * inspector/InspectorIndexedDBAgent.cpp:
+        * inspector/InspectorInstrumentation.cpp:
+        * inspector/InspectorInstrumentation.h:
+        * inspector/PageConsoleAgent.cpp:
+        * inspector/PageDebuggerAgent.cpp:
+        * inspector/PageRuntimeAgent.cpp:
+        * inspector/PageRuntimeAgent.h:
+        * inspector/ScriptArguments.cpp:
+        * inspector/ScriptArguments.h:
+        * inspector/ScriptDebugListener.h:
+        * inspector/WorkerDebuggerAgent.cpp:
+        * inspector/WorkerRuntimeAgent.cpp:
+        * page/Console.cpp:
+        * page/Console.h:
+        * page/ContentSecurityPolicy.cpp:
+        * page/ContentSecurityPolicy.h:
+        * page/PageConsole.cpp:
+        * page/PageConsole.h:
+        * workers/WorkerGlobalScope.cpp:
+        * workers/WorkerGlobalScope.h:
+
+2013-09-13  Sam Weinig  <sam@webkit.org>
+
+        Chrome, DragController and FocusController should hold onto a Page&
+        https://bugs.webkit.org/show_bug.cgi?id=121325
+
+        Reviewed by Anders Carlsson.
+
+        * editing/FrameSelection.cpp:
+        * editing/FrameSelection.h:
+        * page/Chrome.cpp:
+        (WebCore::Chrome::Chrome):
+        (WebCore::Chrome::scroll):
+        (WebCore::Chrome::createWindow):
+        (WebCore::canRunModalIfDuringPageDismissal):
+        (WebCore::Chrome::runBeforeUnloadConfirmPanel):
+        (WebCore::Chrome::runJavaScriptAlert):
+        (WebCore::Chrome::runJavaScriptConfirm):
+        (WebCore::Chrome::runJavaScriptPrompt):
+        (WebCore::Chrome::mouseDidMoveOverElement):
+        (WebCore::Chrome::setToolTip):
+        (WebCore::Chrome::windowScreenDidChange):
+        * page/Chrome.h:
+        * page/DragController.cpp:
+        * page/DragController.h:
+        * page/mac/DragControllerMac.mm:
+        * page/FocusController.cpp:
+        * page/FocusController.h:
+        * page/Page.cpp:
+        (WebCore::Page::Page):
+        * page/PageGroupLoadDeferrer.cpp:
+        * page/PageGroupLoadDeferrer.h:
+        Take references where possible.
+
+2013-09-13  Anders Carlsson  <andersca@apple.com>
+
+        Use nullptr instead of 0 in calls to HashMap::add
+        https://bugs.webkit.org/show_bug.cgi?id=121322
+
+        Reviewed by Sam Weinig.
+
+        * bridge/IdentifierRep.cpp:
+        (WebCore::IdentifierRep::get):
+        * css/CSSFontFaceSource.cpp:
+        (WebCore::CSSFontFaceSource::getFontData):
+        * css/CSSFontSelector.cpp:
+        (WebCore::CSSFontSelector::getFontFace):
+        * css/CSSSegmentedFontFace.cpp:
+        (WebCore::CSSSegmentedFontFace::getFontData):
+        * css/CSSValuePool.cpp:
+        (WebCore::CSSValuePool::createFontFamilyValue):
+        (WebCore::CSSValuePool::createFontFaceValue):
+        * dom/ChildListMutationScope.cpp:
+        (WebCore::ChildListMutationAccumulator::getOrCreate):
+        * dom/Document.cpp:
+        (WebCore::Document::getCSSCanvasElement):
+        * dom/NodeRareData.h:
+        (WebCore::NodeListsNodeData::addCacheWithAtomicName):
+        (WebCore::NodeListsNodeData::addCacheWithName):
+        (WebCore::NodeListsNodeData::addCacheWithQualifiedName):
+        * loader/appcache/ApplicationCacheStorage.cpp:
+        (WebCore::ApplicationCacheStorage::findOrCreateCacheGroup):
+        * page/PageGroup.cpp:
+        (WebCore::PageGroup::pageGroup):
+        * page/animation/AnimationController.cpp:
+        (WebCore::AnimationControllerPrivate::ensureCompositeAnimation):
+        * platform/mac/ScrollbarThemeMac.mm:
+        (WebCore::ScrollbarThemeMac::registerScrollbar):
+        * storage/StorageNamespaceImpl.cpp:
+        (WebCore::StorageNamespaceImpl::localStorageNamespace):
+
+2013-09-13  Sam Weinig  <sam@webkit.org>
+
+        ContextMenuController should hold onto a Page&
+        https://bugs.webkit.org/show_bug.cgi?id=121320
+
+        Reviewed by Anders Carlsson.
+
+        * page/ContextMenuController.cpp:
+        (WebCore::ContextMenuController::ContextMenuController):
+        (WebCore::ContextMenuController::~ContextMenuController):
+        (WebCore::ContextMenuController::showContextMenu):
+        (WebCore::ContextMenuController::contextMenuItemSelected):
+        (WebCore::ContextMenuController::checkOrEnableIfNeeded):
+        (WebCore::ContextMenuController::showContextMenuAt):
+        * page/ContextMenuController.h:
+        Store the Page and ContextMenuClient as references.
+
+        * page/Page.cpp:
+        (WebCore::Page::Page):
+        Pass the Page and ContextMenuClient as references and switch to using createOwned<>().
+
+2013-09-13  Tim Horton  <timothy_horton@apple.com>
+
+        Apply OVERRIDE and FINAL to Image subclasses and clean them up
+        https://bugs.webkit.org/show_bug.cgi?id=121086
+
+        Reviewed by Alexey Proskuryakov.
+
+        Everything other than the copious application of OVERRIDE and FINAL
+        is explicitly called out below.
+
+        * WebCore.exp.in:
+        Export the correct version of getCGImageRef for use by WebKit2.
+
+        * platform/graphics/BitmapImage.cpp:
+        * platform/graphics/BitmapImage.h:
+        Drive-by inline isBitmapImage.
+        Move create(HBITMAP) to be near the other create() functions.
+        Move all of the members private.
+        Devirtualize frameCount().
+        Move notSolidColor() near the other solid color functions.
+
+        * platform/graphics/CrossfadeGeneratedImage.cpp:
+        (WebCore::CrossfadeGeneratedImage::CrossfadeGeneratedImage):
+        (WebCore::CrossfadeGeneratedImage::drawPattern):
+        * platform/graphics/GeneratorGeneratedImage.cpp:
+        (WebCore::GeneratorGeneratedImage::draw):
+        (WebCore::GeneratorGeneratedImage::drawPattern):
+        Use size() and setContainerSize() instead of directly accessing a
+        superclass' (now private, previously protected) members.
+
+        * platform/graphics/CrossfadeGeneratedImage.h:
+        * platform/graphics/GeneratedImage.h:
+        Make m_size private, I don't think we do protected members.
+        
+        * platform/graphics/GeneratorGeneratedImage.h:
+        Make all the members private.
+
+        * svg/graphics/SVGImage.h:
+        * svg/graphics/SVGImageForContainer.h:
+
+2013-09-13  Alexey Proskuryakov  <ap@apple.com>
+
+        [Mac] WebCore Web Inspector files are only copied as part of clean build
+        https://bugs.webkit.org/show_bug.cgi?id=121316
+
+        Reviewed by Timothy Hatcher.
+
+        Removed insufficient dependencies to make the phase run unconditionally.
+
+        * WebCore.xcodeproj/project.pbxproj:
+
+2013-09-13  Eric Carlson  <eric.carlson@apple.com>
+
+        CodeGeneratorJS doesn't generate header includes for sequence<type>
+        https://bugs.webkit.org/show_bug.cgi?id=121314
+
+        Reviewed by Dean Jackson.
+
+        * bindings/scripts/CodeGeneratorJS.pm:
+        (SkipIncludeHeader): Don't return false for sequence and array types.
+        (AddIncludesForType): Do add includes for sequence and array types.
+        (GenerateCallbackImplementation):
+        * bindings/scripts/test/JS/JSTestTypedefs.cpp: Regenerated
+        * bindings/scripts/test/JS/JSTestTypedefs.h: Ditto.
+        * bindings/scripts/test/TestTypedefs.idl: Add a method that takes a sequence<TestEventTarget>.
+
+2013-09-13  Andreas Kling  <akling@apple.com>
+
+        CTTE: RenderSVGResourcePattern always has an SVGPatternElement.
+        <https://webkit.org/b/121313>
+
+        Reviewed by Anders Carlsson.
+
+        This renderer is never anonymous. Tighten things up with a patternElement()
+        reference getter. Removed some unnecessary null checks and assertions.
+
+2013-09-13  Darin Adler  <darin@apple.com>
+
+        Remove layering-violating Pasteboard::plainText function (for all platforms now)
+        https://bugs.webkit.org/show_bug.cgi?id=121312
+
+        Reviewed by Antti Koivisto.
+
+        * editing/Editor.cpp:
+        (WebCore::Editor::pasteAsPlainTextWithPasteboard): Call readPlainTextFromPasteboard
+        on all platforms, not just Mac and EFL. Also call canSmartReplaceWithPasteboard with
+        a reference instead of a pointer.
+        (WebCore::Editor::readPlainTextFromPasteboard): Added. This is a cross-platform
+        version of what was previously a Mac-only function.
+        (WebCore::Editor::plainTextFromPasteboard): Added. This is the simple non-Mac version
+        of this function.
+        (WebCore::Editor::pasteWithPasteboard): Updated to call canSmartReplaceWithPasteboard
+        with a reference.
+        (WebCore::Editor::canSmartReplaceWithPasteboard): Updated to take a reference.
+
+        * editing/Editor.h: Make readPlainTextFromPasteboard cross-platform instead of
+        Mac-only. Also changed argument to canSmartReplaceWithPasteboard to be a reference.
+        Also added private plainTextFromPasteboard function.
+
+        * editing/mac/EditorMac.mm:
+        (WebCore::Editor::pasteWithPasteboard): Updated to call canSmartReplaceWithPasteboard
+        with a reference.
+        (WebCore::Editor::plainTextFromPasteboard): Added. Contains the Mac-specific parts
+        of the readPlainTextFromPasteboard function.
+
+        * platform/Pasteboard.h: Fixed a conditional in the PasteboardPlainText struct to
+        omit iOS. Removed the layering-voiolating plainText function.
+
+        * platform/blackberry/PasteboardBlackBerry.cpp:
+        (WebCore::Pasteboard::read): Renamed from plainText and updated to new calling
+        convention.
+        * platform/gtk/PasteboardGtk.cpp:
+        (WebCore::Pasteboard::read): Ditto.
+        * platform/ios/PasteboardIOS.mm:
+        (WebCore::Pasteboard::read): Ditto.
+        * platform/nix/PasteboardNix.cpp:
+        (WebCore::Pasteboard::read): Ditto.
+        * platform/qt/PasteboardQt.cpp:
+        (WebCore::Pasteboard::read): Ditto.
+        * platform/win/PasteboardWin.cpp:
+        (WebCore::Pasteboard::read): Ditto.
+
+2013-09-13  Gustavo Noronha Silva  <gustavo.noronha@collabora.com>
+
+        [GTK] Move to the new web inspector
+        https://bugs.webkit.org/show_bug.cgi?id=120647
+
+        Reviewed by Carlos Garcia Campos.
+
+        No tests for the new inspector UI as of yet.
+
+        * GNUmakefile.am: no longer install the deprecated inspector UI files.
+        * WebCore.exp.in: add SchemeRegistry symbol that is now used.
+
+2013-09-13  Darin Adler  <darin@apple.com>
+
+        Try to fix Qt build.
+
+        * platform/qt/PasteboardQt.cpp:
+        (WebCore::Pasteboard::write): Update variable name at one place I missed.
+
+2013-09-13  Arvid Nilsson  <anilsson@rim.com>
+
+        [BlackBerry] Scrolling and zooming is slow when Flash plugin visible
+        https://bugs.webkit.org/show_bug.cgi?id=120618
+
+        Reviewed by Anders Carlsson.
+        Internally reviewed by Jacky Jiang.
+
+        JIRA 490823
+        Compositing Flash plugin content triggered a workaround for a graphics
+        driver quirk. The workaround was actually related to WebGL, not Flash,
+        back when we used glCopyTexImage to implement WebGL double buffering
+        (see PR 148933 and 150228 for more details of the old implementation).
+
+        Originally, both WebGL and plugin layers added themselves to the
+        LayerRenderer::m_layersLockingTextureResources list. Now only plugin
+        layers use this list.
+        The glCopyTexImage code was removed long ago, and WebGL now uses the
+        EGLImage-based double buffering approach implemented in
+        EGLImageLayerWebKitThread and EGLImageLayerCompositingThreadClient.
+
+        Fixed by removing the now obsolete workaround, a call to "glFinish".
+        This considerably improves the frame rate of zooming and scrolling when
+        Flash content is visible.
+
+        Improvement in frame rate not appropriate to test using layout tests,
+        could easily result in flaky test.
+
+        * platform/graphics/blackberry/LayerRenderer.cpp:
+        (WebCore::LayerRenderer::compositeLayers):
+
+2013-09-13  Zoltan Horvath  <zoltan@webkit.org>
+
+        Move LineLayoutState class to LineLayoutState.h
+        https://bugs.webkit.org/show_bug.cgi?id=121263
+
+        Reviewed by Ryosuke Niwa.
+
+        I added bitfields, reordered the members and a functions too.
+
+        No new tests, no behavior change.
+
+        * rendering/LineLayoutState.h: Added.
+        (WebCore::LineLayoutState::LineLayoutState):
+        (WebCore::LineLayoutState::markForFullLayout):
+        (WebCore::LineLayoutState::isFullLayout):
+        (WebCore::LineLayoutState::usesRepaintBounds):
+        (WebCore::LineLayoutState::setRepaintRange):
+        (WebCore::LineLayoutState::updateRepaintRangeFromBox):
+        (WebCore::LineLayoutState::endLineMatched):
+        (WebCore::LineLayoutState::setEndLineMatched):
+        (WebCore::LineLayoutState::checkForFloatsFromLastLine):
+        (WebCore::LineLayoutState::setCheckForFloatsFromLastLine):
+        (WebCore::LineLayoutState::lineInfo):
+        (WebCore::LineLayoutState::endLineLogicalTop):
+        (WebCore::LineLayoutState::setEndLineLogicalTop):
+        (WebCore::LineLayoutState::endLine):
+        (WebCore::LineLayoutState::setEndLine):
+        (WebCore::LineLayoutState::lastFloat):
+        (WebCore::LineLayoutState::setLastFloat):
+        (WebCore::LineLayoutState::floats):
+        (WebCore::LineLayoutState::floatIndex):
+        (WebCore::LineLayoutState::setFloatIndex):
+        (WebCore::LineLayoutState::adjustedLogicalLineTop):
+        (WebCore::LineLayoutState::setAdjustedLogicalLineTop):
+        (WebCore::LineLayoutState::flowThread):
+        (WebCore::LineLayoutState::setFlowThread):
+        * rendering/RenderBlockLineLayout.cpp: Remove LineLayoutState.
+
+2013-09-13  Darin Adler  <darin@apple.com>
+
+        Remove layering-violating Pasteboard::writeURL (for all platforms now)
+        https://bugs.webkit.org/show_bug.cgi?id=121306
+
+        Reviewed by Antti Koivisto.
+
+        * editing/Editor.cpp:
+        (WebCore::Editor::copyURL): Move the contents of the writeURLToPasteboard function
+        in here.
+
+        * editing/Editor.h: Removed Mac-specific writeURLToPasteboard, added private
+        Mac-specific fillInUserVisibleForm function for the one Mac-specific part of writing URLs.
+
+        * editing/efl/EditorEfl.cpp: Deleted Editor::writeURLToPasteboard.
+
+        * editing/mac/EditorMac.mm: Deleted Editor::writeURLToPasteboard, moving the code
+        into copyURL.
+        (WebCore::Editor::fillInUserVisibleForm): Added.
+
+        * page/DragController.cpp:
+        (WebCore::DragController::startDrag): Call copyURL instead of writeURL or
+        writeURLToPasteboard.
+
+        * platform/Pasteboard.h: Fixed up the PasteboardURL struct so it's suitable for
+        cross-platform use. Removed the writeURL function. Removed the Frame* argument from
+        the Windows-specific writeURLToDataObject function.
+
+        * platform/blackberry/PasteboardBlackBerry.cpp:
+        (WebCore::Pasteboard::write): Renamed/refactored from writeURL.
+        * platform/gtk/PasteboardGtk.cpp:
+        (WebCore::Pasteboard::write): Ditto.
+        * platform/nix/PasteboardNix.cpp:
+        (WebCore::Pasteboard::write): Ditto.
+        * platform/qt/PasteboardQt.cpp:
+        (WebCore::Pasteboard::write): Ditto.
+        * platform/win/PasteboardWin.cpp:
+        (WebCore::Pasteboard::writeURLToDataObject): Removed unused Frame* argument.
+        (WebCore::Pasteboard::write): Renamed/refactored from writeURL.
+
+2013-09-13  Chris Fleizach  <cfleizach@apple.com>
+
+        AX: AXPress does not work in SVG
+        https://bugs.webkit.org/show_bug.cgi?id=121248
+
+        Reviewed by Mario Sanchez Prada.
+
+        Implement accessKeyAction() on SVGElements, which is what accessibility code
+        uses in order to activate Elements.
+
+        Test: accessibility/svg-element-press.html
+
+        * svg/SVGElement.cpp:
+        (WebCore::SVGElement::accessKeyAction):
+        * svg/SVGElement.h:
+
+2013-09-13  Andreas Kling  <akling@apple.com>
+
+        [CTTE] RenderSVGTransformableContainer is never anonymous.
+        <https://webkit.org/b/121304>
+
+        Reviewed by Anders Carlsson.
+
+        This renderer is never anonymous. Tighten things up with a graphicsElement()
+        reference getter.
+
+2013-09-13  Andreas Kling  <akling@apple.com>
+
+        [CTTE] RenderSVGImage always has a SVGImageElement.
+        <https://webkit.org/b/121301>
+
+        Reviewed by Anders Carlsson.
+
+        This renderer is never anonymous, and always has a corresponding SVGImageElement.
+
+2013-09-13  Andreas Kling  <akling@apple.com>
+
+        [CTTE] Tighter element types for RenderSVGShape and subclasses.
+        <https://webkit.org/b/121302>
+
+        Reviewed by Antti Koivisto.
+
+        Codify the following:
+
+        - RenderSVGPath always has an SVGGraphicsElement.
+        - RenderSVGEllipse always has an SVGGraphicsElement.
+        - RenderSVGRect always has an SVGRectElement.
+        - RenderSVGShape always has an SVGGraphicsElement.
+
+        None of these renderers are ever anonymous, so delete element() and provide
+        strongly typed reference getters instead.
+
+2013-09-13  Andreas Kling  <akling@apple.com>
+
+        [CTTE] RenderSVGResourceFilterPrimitive always has an SVGFilterPrimitiveStandardAttributes.
+        <https://webkit.org/b/121300>
+
+        Reviewed by Anders Carlsson.
+
+        This renderer is never anonymous, and always has a corresponding SVGFilterPrimitiveStandardAttributes element. 
+
+2013-09-12  Darin Adler  <darin@apple.com>
+
+        Finish removing layer-violating code from Pasteboard (just for Mac during this first step)
+        https://bugs.webkit.org/show_bug.cgi?id=121279
+
+        Reviewed by Anders Carlsson.
+
+        * editing/Editor.h: Added webContentFromPasteboard member function, private nested class
+        WebContentReader, private createFragmentForImageResourceAndAddResource and
+        createFragmentAndAddResources member functions.
+
+        * editing/mac/EditorMac.mm: Re-sorted includes and added some.
+        (WebCore::Editor::pasteWithPasteboard): Call the new webContentFromPasteboard function.
+        (WebCore::Editor::insertParagraphSeparatorInQuotedContent): Comment tweak.
+        (WebCore::styleForSelectionStart): Removed an unneeded call to String::impl.
+        (WebCore::Editor::readPlainTextFromPasteboard): Updated to use an isURL boolean instead
+        of a separate string named "url".
+        (WebCore::Editor::WebContentReader::readWebArchive): Added. Contains reworked code that
+        was originally in Pasteboard::documentFragment.
+        (WebCore::Editor::WebContentReader::readFilenames): Ditto.
+        (WebCore::Editor::WebContentReader::readHTML): Ditto.
+        (WebCore::Editor::WebContentReader::readRTFD): Ditto.
+        (WebCore::Editor::WebContentReader::readRTF): Ditto.
+        (WebCore::Editor::WebContentReader::readImage): Ditto.
+        (WebCore::Editor::WebContentReader::readURL): Ditto.
+        (WebCore::Editor::WebContentReader::readPlainText): Ditto.
+        (WebCore::Editor::webContentFromPasteboard): Added. Uses WebContentReader to read the
+        content from the pasteboard.
+        (WebCore::Editor::createFragmentForImageResourceAndAddResource): Added. Helper used
+        by code above.
+        (WebCore::Editor::createFragmentAndAddResources): Ditto.
+
+        * platform/Pasteboard.h: Added new PasteboardWebContentReader abstract class so
+        client can get the various types of pasteboard content and stop on the kind it
+        can handle. Improved comments and formatting a bit. Removed documentFragment
+        when compiling for PLATFORM(MAC).
+
+        * platform/mac/DragDataMac.mm:
+        (WebCore::DragData::asFragment): Changed to use Editor::webContentFromPasteboard.
+
+        * platform/mac/PasteboardMac.mm:
+        (WebCore::Pasteboard::read): Updated the plain text overload of this for changes
+        to the struct that holds the result. Added a new web content overload of this,
+        which retains the pasteboard-reading part of Pasteboard::documentFragment, but
+        omits the document fragment construction part.
+
+2013-09-13  Andreas Kling  <akling@apple.com>
+
+        [CTTE] RenderSVGText always has a SVGTextElement.
+        <https://webkit.org/b/121299>
+
+        Reviewed by Antti Koivisto.
+
+        This renderer is never anonymous, and always has a corresponding <svg> element.
+        Tighten this up and remove some pointless assertions.
+
+2013-09-13  Allan Sandfeld Jensen  <allan.jensen@digia.com>
+
+        Remove support for QXmlStream as the XML parser.
+        https://bugs.webkit.org/show_bug.cgi?id=121229
+
+        Reviewed by Andreas Kling.
+
+        Remove the implementation and all the #ifdef related to it.
+
+        * Target.pri:
+        * WebCore.pri:
+        * dom/TransformSource.h:
+        * xml/XMLErrors.h:
+        * xml/XSLStyleSheet.h:
+        * xml/XSLTProcessor.h:
+        * xml/parser/XMLDocumentParser.cpp:
+        (WebCore::XMLDocumentParser::enterText):
+        (WebCore::toString):
+        (WebCore::XMLDocumentParser::exitText):
+        (WebCore::XMLDocumentParser::insertErrorMessageBlock):
+        * xml/parser/XMLDocumentParser.h:
+        * xml/parser/XMLDocumentParserQt.cpp: Removed.
+
+2013-09-13  Andreas Kling  <akling@apple.com>
+
+        [CTTE] RenderSVGViewportContainer always has a SVGSVGElement.
+        <https://webkit.org/b/121297>
+
+        Reviewed by Antti Koivisto.
+
+        This renderer is never anonymous, and always has a corresponding <svg> element.
+        Tighten this up and remove some pointless null checks and type checks.
+
+2013-09-13  Andreas Kling  <akling@apple.com>
+
+        [CTTE] RenderSVGRoot always has a SVGSVGElement.
+        <https://webkit.org/b/121293>
+
+        Reviewed by Antti Koivisto.
+
+        This renderer is never anonymous, and always has a corresponding <svg> element.
+        Tighten this up and remove some pointless null checks and assertions.
+
+2013-09-13  Andreas Kling  <akling@apple.com>
+
+        Remove support for anonymous deprecated flexboxes.
+        <https://webkit.org/b/121288>
+
+        Reviewed by Antti Koivisto.
+
+        There are no remaining internal clients of RenderDeprecatedFlexibleBox,
+        Nuke a FIXME from r143643 where the move to basing renderers on new flexbox started.
+
+        This was the only user of anonymous deprecated flexbox, so removed the ability to
+        construct those.
+
+        Also removed some Chrome-related feature observation gunk from constructor.
+
+2013-09-13  Andreas Kling  <akling@apple.com>
+
+        [CTTE] RenderMultiColumnBlock is never anonymous.
+        <https://webkit.org/b/121292>
+
+        Reviewed by Antti Koivisto.
+
+        Hide element() and provide existingElement() instead, returning an Element&.
+
+2013-09-13  Andreas Kling  <akling@apple.com>
+
+        [CTTE] RenderGrid is never anonymous.
+        <https://webkit.org/b/121290>
+
+        Reviewed by Antti Koivisto.
+
+        Hide element() and provide existingElement() instead, returning an Element&.
+
+2013-09-13  Andreas Kling  <akling@apple.com>
+
+        [CTTE] RenderTableCaption is never anonymous.
+        <https://webkit.org/b/121289>
+
+        Reviewed by Antti Koivisto.
+
+        Hide element() and provide existingElement() instead, returning an Element&.
+
+2013-09-13  Andreas Kling  <akling@apple.com>
+
+        [CTTE] RenderTableCol is never anonymous.
+        <https://webkit.org/b/121286>
+
+        Reviewed by Antti Koivisto.
+
+        Hide element() and provide existingElement() instead, returning an Element&.
+        Removed one bogus null check that was exposed.
+
+2013-09-13  Andreas Kling  <akling@apple.com>
+
+        [CTTE] RenderListItem is never anonymous.
+        <https://webkit.org/b/121285>
+
+        Reviewed by Antti Koivisto.
+
+        Hide element() and provide existingElement() instead, returning an Element&.
+        Removed some bogus assertions that were exposed by this.
+
+2013-09-13  Andreas Kling  <akling@apple.com>
+
+        [CTTE] Tighter element types for RenderSVGInline and subclasses.
+        <https://webkit.org/b/121283>
+
+        Reviewed by Antti Koivisto.
+
+        Codify the following:
+
+        - RenderSVGInline always has an SVGGraphicsElement.
+        - RenderSVGTextPath always has an SVGTextPathElement.
+        - RenderSVGTSpan always has an SVGTextPositioningElement.
+
+        None of these renderers are ever anonymous, so delete element() and provide
+        strongly typed reference getters instead.
+
+2013-09-13  Andreas Kling  <akling@apple.com>
+
+        [CTTE] RenderFileUploadControl always has a HTMLInputElement.
+        <https://webkit.org/b/121278>
+
+        Reviewed by Darin Adler.
+
+        RenderFileUploadControl is never anonymous and always has a corresponding HTMLInputElement.
+
+2013-09-13  Andreas Kling  <akling@apple.com>
+
+        [CTTE] RenderFieldset always has a HTMLFieldSetElement.
+        <https://webkit.org/b/121277>
+
+        Reviewed by Darin Adler.
+
+        RenderFieldset is never anonymous and always has a corresponding HTMLFieldSetElement.
+
+2013-09-13  Andreas Kling  <akling@apple.com>
+
+        [CTTE] RenderButton always has a HTMLFormControlElement.
+        <https://webkit.org/b/121281>
+
+        Reviewed by Antti Koivisto.
+
+        RenderButton is never anonymous and has either a <button> or an <input> element,
+        and their nearest shared ancestor is HTMLFormControlElement.
+
+2013-09-13  Darin Adler  <darin@apple.com>
+
+        Give actions in Range class NON_SHOUTING_NAMES
+        https://bugs.webkit.org/show_bug.cgi?id=121280
+
+        Reviewed by Andreas Kling.
+
+        * dom/Range.cpp:
+        (WebCore::Range::deleteContents):
+        (WebCore::Range::processContents):
+        (WebCore::Range::processContentsBetweenOffsets):
+        (WebCore::Range::processNodes):
+        (WebCore::Range::processAncestorsAndTheirSiblings):
+        (WebCore::Range::extractContents):
+        (WebCore::Range::cloneContents):
+        * dom/Range.h:
+        Just let do-webcore-rename do its thing.
+        - DELETE_CONTENTS -> Delete
+        - EXTRACT_CONTENTS -> Extract
+        - CLONE_CONTENTS -> Clone
+
+2013-09-12  Santosh Mahto  <santosh.ma@samsung.com>
+
+        [EFL]Background Style of element not visible because of  default theme style
+        https://bugs.webkit.org/show_bug.cgi?id=117405
+
+        Reviewed by Gyuyoung Kim.
+
+        When select element is styled with css background property(color/image) the styling
+        gets hidden by Combo box non transparent image. This patch handle the
+        case and transparent images are used when select image is styled. So
+        now background-color and background-image are visible across the Combo box
+        
+        The code is added to support css styling of other theme control,
+        Basically an extra signal is emitted to edje which change the state 
+        of edje object whenever the control is styled.
+
+        Covered by existing test case, updated the test expected image.
+
+        * platform/efl/DefaultTheme/CMakeLists.txt:
+        * platform/efl/DefaultTheme/widget/combo/combo.edc:
+        * platform/efl/DefaultTheme/widget/combo/combo_focus_button_transparent.png: Added.
+        * platform/efl/DefaultTheme/widget/combo/combo_focus_transparent.png: Added.
+        * platform/efl/DefaultTheme/widget/combo/combo_hover_button_transparent.png: Added.
+        * platform/efl/DefaultTheme/widget/combo/combo_hover_transparent.png: Added.
+        * platform/efl/DefaultTheme/widget/combo/combo_normal_button_transparent.png: Added.
+        * platform/efl/DefaultTheme/widget/combo/combo_normal_transparent.png: Added.
+        * platform/efl/DefaultTheme/widget/combo/combo_press_button_transparent.png: Added.
+        * platform/efl/DefaultTheme/widget/combo/combo_press_transparent.png: Added.
+        * platform/efl/RenderThemeEfl.cpp:
+        (WebCore::RenderThemeEfl::applyEdjeStateFromForm):
+        (WebCore::RenderThemeEfl::isControlStyled):
+        (WebCore::RenderThemeEfl::paintThemePart):
+        * platform/efl/RenderThemeEfl.h:
+
+2013-09-12  Andreas Kling  <akling@apple.com>
+
+        [CTTE] RenderMenuList always has a HTMLSelectElement.
+        <https://webkit.org/b/121276>
+
+        Reviewed by Anders Carlsson.
+
+        This renderer is never anonymous and always has a corresponding HTMLSelectElement.
+        Deleted element() in favor of HTMLSelectElement& selectElement().
+
+2013-09-12  Andreas Kling  <akling@apple.com>
+
+        [CTTE] Tighten RenderTextControl element typing.
+        <https://webkit.org/b/121275>
+
+        Reviewed by Anders Carlsson.
+
+        Codify these invariants:
+
+        - RenderTextControl always has a HTMLTextFormControl.
+        - RenderSearchField always has a HTMLInputElement.
+        - RenderTextControlSingleLine always has a HTMLInputElement.
+
+        None of these renderers are ever anonymous. Deleted element() and added
+        strongly typed reference getters instead.
+
+2013-09-12  Andreas Kling  <akling@apple.com>
+
+        [CTTE] RenderListMarker is always anonymous and owned by RenderListItem.
+        <https://webkit.org/b/121274>
+
+        Reviewed by Anders Carlsson.
+
+        Store a RenderListItem& instead of a pointer in RenderListMarker.
+        Deleted the element() function since list markers are always anonymous.
+
+2013-09-12  Andreas Kling  <akling@apple.com>
+
+        [CTTE] RenderListBox's element is always a HTMLSelectElement.
+        <https://webkit.org/b/121273>
+
+        Reviewed by Anders Carlsson.
+
+        Hide element() on RenderListBox and make selectElement() return a reference
+        since this renderer cannot be anonymous.
+
+2013-09-12  Andreas Kling  <akling@apple.com>
+
+        [CTTE] RenderHTMLCanvas's element is always a HTMLCanvasElement.
+        <https://webkit.org/b/121272>
+
+        Reviewed by Anders Carlsson.
+
+        Add RenderHTMLCanvas::canvasElement(), hiding element().
+        This function also returns a reference since this renderer cannot be anonymous.
+
+2013-09-12  Andreas Kling  <akling@apple.com>
+
+        [CTTE] RenderTextControlMultiLine's element is always a HTMLTextAreaElement.
+        <https://webkit.org/b/121271>
+
+        Reviewed by Anders Carlsson.
+
+        Add RenderTextControlMultiLine::textAreaElement(), hiding element().
+        This function also returns a reference since this renderer cannot be anonymous.
+
+2013-09-12  Tim Horton  <timothy_horton@apple.com>
+
+        [mac] Cache rendered image in PDFDocumentImage
+        https://bugs.webkit.org/show_bug.cgi?id=121207
+
+        Reviewed by Simon Fraser.
+
+        Tests: fast/images/pdf-as-image-too-big.html
+
+        * loader/cache/CachedImage.cpp:
+        (WebCore::CachedImage::createImage):
+        PDFDocumentImage takes a ImageObserver now so that it can report
+        decoded data size changes to the memory cache.
+
+        * platform/graphics/Image.h:
+        (WebCore::Image::isPDFDocumentImage): Added.
+
+        * platform/graphics/cg/PDFDocumentImage.cpp:
+        (WebCore::PDFDocumentImage::PDFDocumentImage):
+        PDFDocumentImage takes a ImageObserver now so that it can report
+        decoded data size changes to the memory cache.
+
+        (WebCore::PDFDocumentImage::applyRotationForPainting):
+        Fix up some comments, and use GraphicsContext instead of CG API.
+
+        (WebCore::PDFDocumentImage::cacheParametersMatch):
+        Determine whether our cached image is still valid, given the new
+        destination's size, CTM scale, and source rect.
+
+        (WebCore::transformContextForPainting): Added.
+
+        (WebCore::PDFDocumentImage::updateCachedImageIfNeeded):
+        Cache a rendered bitmap of the PDF. Invalidate the cache if cacheParametersMatch
+        decides that the parameters don't match, unless we're painting in low quality mode,
+        in which case we'll scale the existing image (and then fully repaint when the
+        high-quality repaint timer fires).
+        Inform the memory cache of our new size.
+
+        (WebCore::PDFDocumentImage::draw):
+        Update the cached image if needed.
+        Paint the cached image into the context if it's available (which it might not be,
+        if the image is way too big and the allocation fails). Otherwise, paint straight
+        into the context as we previously did.
+
+        (WebCore::PDFDocumentImage::destroyDecodedData):
+        Throw away the cached image if requested.
+
+        (WebCore::PDFDocumentImage::decodedSize):
+        (WebCore::PDFDocumentImage::drawPDFPage):
+        Drive-by use GraphicsContext instead of CG directly.
+
+        * platform/graphics/cg/PDFDocumentImage.h:
+        (WebCore::PDFDocumentImage::create):
+        Override isPDFDocumentImage().
+        Add storage for the cached image buffer and various cache parameters.
+
+        * rendering/ImageQualityController.cpp:
+        (WebCore::ImageQualityController::shouldPaintAtLowQuality):
+        PDFDocumentImage is also interested in/capable of low-quality painting now.
+
+2013-09-12  Tim Horton  <timothy_horton@apple.com>
+
+        Image doesn't always repaint at high quality in all tiles after a live resize
+        https://bugs.webkit.org/show_bug.cgi?id=121244
+
+        Reviewed by Darin Adler.
+
+        Currently, ImageQualityController removes an image from its low-quality-images
+        list from inside shouldPaintAtLowQuality, if this is the first paint outside
+        of a live resize, but does not force the renderer to repaint in its entirety.
+
+        However, there's no guarantee we've invalidated the whole renderer, so this can
+        leave some parts of the image painted in low-quality.
+
+        This just removes a short-circuit, instead using the ordinary high-quality-repaint
+        timer to ensure that the entire renderer is repainted.
+
+        No new test; all attempts have failed, as this depends on tiled drawing
+        and a live resize occurring.
+
+        * rendering/ImageQualityController.cpp:
+        (WebCore::ImageQualityController::shouldPaintAtLowQuality):
+
+2013-09-12  Brent Fulgham  <bfulgham@apple.com>
+
+        [EFL] Speculative build fix after r155638.
+
+        * platform/efl/PasteboardEfl.cpp: Add include for PassRefPtr, which
+        is no longer implicitly included.
+
+2013-09-12  Simon Fraser  <simon.fraser@apple.com>
+
+        Avoid extra scrollbar-related layouts for overlay scrollbars
+        https://bugs.webkit.org/show_bug.cgi?id=121267
+
+        Reviewed by Beth Dakin.
+
+        If ScrollView::updateScrollbars() detected that scrollbars were added
+        and removed, it would call contentsResized(), which calls setNeedsLayout(),
+        followed by visibleContentsResized() which would trigger layout. There is no
+        point doing this with overlay scrollbars, so avoid it by having 
+        setHas*Scrollbar() return true if the addition/removal of a scrollbar changed
+        the available width.
+        
+        No tests: we can't test overlay scrollbars in tests.
+
+        * page/FrameView.cpp:
+        (WebCore::FrameView::setContentsSize): Drive-by assertion that
+        checks that the unsigned m_deferSetNeedsLayouts doesn't wrap when
+        decremented.
+        * platform/ScrollView.cpp:
+        (WebCore::ScrollView::setHasHorizontalScrollbar): Return true if the addition/removal
+        changed available space.
+        (WebCore::ScrollView::setHasVerticalScrollbar): Ditto.
+        (WebCore::ScrollView::updateScrollbars): Only set sendContentResizedNotification
+        if available space was changed by addition/removal of scrollbars.
+        * platform/ScrollView.h:
+
+2013-09-12  Zoltan Horvath  <zoltan@webkit.org>
+
+        [CSS Shapes] Rename shapeContainingBlockHeight to shapeContainingBlockLogicalHeight
+        https://bugs.webkit.org/show_bug.cgi?id=121252
+
+        Reviewed by Oliver Hunt.
+
+        No new tests, no behavior change.
+
+        * rendering/RenderBlockLineLayout.cpp:
+        (WebCore::pushShapeContentOverflowBelowTheContentBox):
+        * rendering/shapes/ShapeInfo.h:
+        (WebCore::ShapeInfo::shapeContainingBlockLogicalHeight):
+
+2013-09-12  Samuel White  <samuel_white@apple.com>
+
+        <meter> element AXValue is listed as a writable value
+        https://bugs.webkit.org/show_bug.cgi?id=117650
+
+        Reviewed by Chris Fleizach.
+
+        No new tests, updated existing accessibility/meter-element.html test
+        to check writability. Changed meter element value to be unwritable.
+
+        * accessibility/AccessibilityRenderObject.cpp:
+        (WebCore::AccessibilityRenderObject::canSetValueAttribute):
+
+2013-09-12  Renata Hodovan  <reni@webkit.org>
+
+        [Qt] SHOULD NEVER BE REACHED is touched WebCore::InputType::createStepRange
+        https://bugs.webkit.org/show_bug.cgi?id=121148
+
+        Reviewed by Kent Tamura.
+
+        Non-steppable input types must not rendered as slider even if its webkit-apperance style
+        property is set to slider-vertical/horizontal.
+
+        Test: platform/qt/fast/forms/range/slider-crash-on-input.html
+
+        * platform/qt/RenderThemeQStyle.cpp:
+        (WebCore::RenderThemeQStyle::paintSliderTrack):
+
+2013-09-12  Ryosuke Niwa  <rniwa@webkit.org>
+
+        Qt and Windows build fix.
+
+        * page/animation/CSSPropertyAnimation.cpp:
+
+2013-09-11  Ryosuke Niwa  <rniwa@webkit.org>
+
+        Encapsulate globals in CSSPropertyAnimation.cpp
+        https://bugs.webkit.org/show_bug.cgi?id=121205
+
+        Reviewed by Antti Koivisto.
+
+        Encapsulated the globals inside a newly added CSSPropertyAnimationWrapperMap. Also removed the circular
+        dependency from ShorthandPropertyWrapper's constructor to CSSPropertyAnimationWrapperMap::instance().
+        The circular dependency still exists in ensurePropertyMap but I'm going to remove it in the bug 121199.
+
+        * page/animation/CSSPropertyAnimation.cpp:
+        (WebCore::ShorthandPropertyWrapper::ShorthandPropertyWrapper): Takes a Vector of longhand wrappers instead of
+        calling wrapperForProperty in the middle of constructing the very table. This circular dependency is now
+        encapsulated in CSSPropertyAnimationWrapperMap::ensurePropertyMap.
+        (WebCore::CSSPropertyAnimationWrapperMap::instance): Added.
+        (WebCore::CSSPropertyAnimationWrapperMap::wrapperForProperty): Renamed from WebCore::wrapperForProperty.
+        (WebCore::CSSPropertyAnimationWrapperMap::wrapperForIndex): Added.
+        (WebCore::CSSPropertyAnimationWrapperMap::size): Added.
+        (WebCore::CSSPropertyAnimationWrapperMap::addPropertyWrapper): Renamed from WebCore::addPropertyWrapper. Also
+        cleaned up boolean logics to use early exits instead of nested ifs.
+        (WebCore::CSSPropertyAnimationWrapperMap::addShorthandProperties): Renamed from WebCore::addShorthandProperties.
+        (WebCore::CSSPropertyAnimationWrapperMap::ensurePropertyMap): Renamed from WebCore::ensurePropertyMap.
+        Added an alias gPropertyWrappers for m_propertyWrappers; this aliasing will be removed in the bug 121199.
+        (WebCore::CSSPropertyAnimation::blendProperties):
+        (WebCore::CSSPropertyAnimation::animationOfPropertyIsAccelerated):
+        (WebCore::CSSPropertyAnimation::animatableShorthandsAffectingProperty):
+        (WebCore::CSSPropertyAnimation::propertiesEqual):
+        (WebCore::CSSPropertyAnimation::getPropertyAtIndex):
+        (WebCore::CSSPropertyAnimation::getNumProperties):
+        * page/animation/CSSPropertyAnimation.h:
+        * rendering/style/RenderStyle.h:
+
+2013-09-12  Anders Carlsson  <andersca@apple.com>
+
+        SharedBuffer::createNSData should return a RetainPtr<NSData>
+        https://bugs.webkit.org/show_bug.cgi?id=121237
+
+        Reviewed by Darin Adler.
+
+        This makes memory management cleared and fixes a leak in PDFDocumentImage::createPDFDocument.
+        We use a RetainPtr subclass as a stopgap measure to prevent code that does [buffer->createNSData() autorelease]
+        from compiling and crashing due to the NSData object being overreleased.
+
+        * loader/ResourceBuffer.h:
+        * loader/mac/ResourceBuffer.mm:
+        (WebCore::ResourceBuffer::createNSData):
+        * platform/SharedBuffer.h:
+        (WebCore::SharedBuffer::NSDataRetainPtr::NSDataRetainPtr):
+        * platform/graphics/mac/PDFDocumentImageMac.mm:
+        (WebCore::PDFDocumentImage::createPDFDocument):
+        * platform/mac/HTMLConverter.mm:
+        (-[WebHTMLConverter _addAttachmentForElement:URL:needsParagraph:usePlaceholder:]):
+        (fileWrapperForURL):
+        * platform/mac/PasteboardMac.mm:
+        (WebCore::fileWrapper):
+        (WebCore::Pasteboard::read):
+        (WebCore::documentFragmentWithRTF):
+        (WebCore::fragmentFromWebArchive):
+        * platform/mac/PlatformPasteboardMac.mm:
+        (WebCore::PlatformPasteboard::setBufferForType):
+        * platform/mac/SharedBufferMac.mm:
+        (WebCore::SharedBuffer::createNSData):
+
+2013-09-12  Timothy Hatcher  <timothy@apple.com>
+
+        Remove more Timeline stuff we don't use
+        https://bugs.webkit.org/show_bug.cgi?id=121246
+
+        Reviewed by Joseph Pecoraro.
+
+        * inspector/InspectorController.cpp:
+        * inspector/InspectorController.h:
+        * inspector/InspectorDOMDebuggerAgent.cpp:
+        * inspector/InspectorDOMDebuggerAgent.h:
+        * inspector/InspectorProfilerAgent.cpp:
+        (WebCore::InspectorProfilerAgent::InspectorProfilerAgent):
+        * inspector/InspectorProfilerAgent.h:
+        * inspector/InspectorTimelineAgent.cpp:
+        (WebCore::InspectorTimelineAgent::innerAddRecordToTimeline):
+        * inspector/InspectorTimelineAgent.h:
+
+2013-09-12  Christophe Dumez  <ch.dumez@sisa.samsung.com>
+
+        [EFL] Get rid of layering violations in PasteboardEfl.cpp
+        https://bugs.webkit.org/show_bug.cgi?id=121241
+
+        Reviewed by Darin Adler.
+
+        Get rid of layering violations in PasteboardEfl.cpp. For now, just mimic
+        the Mac port to avoid divergences and leave port-specific functions
+        unimplemented as the EFL port does not support the pasteboard functionality
+        yet.
+
+        No new tests, no behavior change.
+
+        * PlatformEfl.cmake:
+        * editing/Editor.cpp:
+        (WebCore::Editor::pasteAsPlainTextWithPasteboard):
+        (WebCore::Editor::cut):
+        (WebCore::Editor::copy):
+        (WebCore::Editor::copyURL):
+        (WebCore::Editor::copyImage):
+        * editing/Editor.h:
+        * editing/efl/EditorEfl.cpp: Added.
+        (WebCore::Editor::writeSelectionToPasteboard):
+        (WebCore::Editor::writeURLToPasteboard):
+        (WebCore::Editor::writeImageToPasteboard):
+        (WebCore::Editor::readPlainTextFromPasteboard):
+        (WebCore::Editor::pasteWithPasteboard):
+        * page/DragController.cpp:
+        (WebCore::DragController::startDrag):
+        * platform/Pasteboard.h:
+        * platform/efl/PasteboardEfl.cpp:
+
+2013-09-12  Alberto Garcia  <berto@igalia.com>
+
+        [GTK] Unreviewed build fix after r155635.
+
+        Include DragData.h
+
+        * platform/gtk/PasteboardGtk.cpp:
+
+2013-09-12  Brent Fulgham  <bfulgham@apple.com>
+
+        [Windows] Build fix after r155635.
+
+        Rubber Stamped by Darin Adler.
+
+        * platform/Pasteboard.h: Add missing compile guards for Windows port.
+
+2013-09-12  Darin Adler  <darin@apple.com>
+
+        Reorganize Pasteboard.h to make it easier to read, and express plan for future work
+        https://bugs.webkit.org/show_bug.cgi?id=121234
+
+        Reviewed by Anders Carlsson.
+
+        * platform/Pasteboard.h: Move Mac/iOS-specific pasteboard names to the bottom of the
+        file rather than putting them up with forward declarations before the class. Removed
+        unneeded forward class declarations. Changed #if statements about migration to the
+        more modern non-layering-violation API to list platforms not yet migrated, rather than
+        listing platforms that have migrated (Mac). Move conditional code down below the
+        uncondiditional code so it's easier to see what the class is doing. Move layering-
+        violation code down to the bottom too, so it's easier to see the future class without
+        having the design mistakes mixed in. Sort platform-specific sections in alphabetical
+        order instead of random order. Did the destructor in a cleaner way so the #if is out
+        of the way after the class rather than in the class. Removed WebSmartPastePboardType,
+        WebURLPboardType, and WebURLsWithTitlesPboard declarations, since they are only used
+        inside the PasteboardMac.mm source file.
+
+        * platform/ios/PasteboardIOS.mm: Aded a FIXME comment.
+        * platform/mac/PasteboardMac.mm: Made the constants for pasteboard types be actual
+        constants, rather than global variables.
+
+2013-09-12  Tamas Czene  <tczene@inf.u-szeged.hu>
+
+        [curl] Use utf8 for headers in CurlDownload.
+        https://bugs.webkit.org/show_bug.cgi?id=120413
+
+        Reviewed by Brent Fulgham.
+
+        * platform/network/curl/CurlDownload.cpp:
+        (WebCore::CurlDownload::headerCallback):
+
+2013-09-12  Peter Gal  <galpeter@inf.u-szeged.hu>
+
+        [curl] Improve multipart response handling
+        https://bugs.webkit.org/show_bug.cgi?id=117735
+
+        Reviewed by Brent Fulgham.
+
+        The multipart/x-mixed-replace mime type in responses are ignored
+        with the curl network backend. To handle such responses the
+        MultipartHandle is introduced which will split the content using
+        the boundary specified by the mime type.
+
+        There are already existing tests (http/tests/multipart).
+
+        * WebCore.vcxproj/WebCore.vcxproj:
+        * WebCore.vcxproj/WebCore.vcxproj.filters:
+        * platform/network/HTTPParsers.cpp:
+        (WebCore::parseHTTPHeader):
+        * platform/network/HTTPParsers.h:
+        * platform/network/ResourceHandleInternal.h:
+        * platform/network/curl/MultipartHandle.cpp: Added.
+        (WebCore::MultipartHandle::extractBoundary):
+        (WebCore::MultipartHandle::matchForBoundary):
+        (WebCore::MultipartHandle::checkForBoundary):
+        (WebCore::MultipartHandle::parseHeadersIfPossible):
+        (WebCore::MultipartHandle::contentReceived):
+        (WebCore::MultipartHandle::processContent):
+        (WebCore::MultipartHandle::contentEnded):
+        (WebCore::MultipartHandle::didReceiveData):
+        (WebCore::MultipartHandle::didReceiveResponse):
+        * platform/network/curl/MultipartHandle.h: Added.
+        (WebCore::MultipartHandle::MultipartHandle):
+        (WebCore::MultipartHandle::~MultipartHandle):
+        * platform/network/curl/ResourceHandleManager.cpp:
+        (WebCore::writeCallback):
+        (WebCore::headerCallback):
+        (WebCore::ResourceHandleManager::downloadTimerCallback):
+
+2013-09-12  Andreas Kling  <akling@apple.com>
+
+        Remove RenderApplet.
+        <https://webkit.org/b/121231>
+
+        Reviewed by Darin Adler.
+
+        Add a RenderEmbeddedObject::createForApplet(HTMLAppletElement&) and nuke
+        the RenderApplet class from orbit.
+
+2013-09-12  Brent Fulgham  <bfulgham@apple.com>
+
+        [Windows] Build fix after r155621
+
+        Rubber-stamped by Anders Carlsson.
+
+        See also https://bugs.webkit.org/show_bug.cgi?id=121235 for
+        why this was necessary.
+
+        * css/MediaQueryEvaluator.cpp: Work around VS compiler bug.
+        * dom/make_names.pl: Ditto.
+        * loader/archive/ArchiveFactory.cpp: Ditto.
+        * rendering/svg/SVGPathData.cpp: Ditto.
+
+2013-09-12  Anders Carlsson  <andersca@apple.com>
+
+        SharedBuffer::createCFData should return RetainPtr<CFDataRef>
+        https://bugs.webkit.org/show_bug.cgi?id=121230
+
+        Reviewed by Darin Adler.
+
+        * loader/ResourceBuffer.cpp:
+        (WebCore::ResourceBuffer::createCFData):
+        * loader/ResourceBuffer.h:
+        * loader/archive/cf/LegacyWebArchive.cpp:
+        (WebCore::LegacyWebArchive::createPropertyListRepresentation):
+        (WebCore::LegacyWebArchive::create):
+        * platform/SharedBuffer.h:
+        * platform/cf/SharedBufferCF.cpp:
+        (WebCore::SharedBuffer::createCFData):
+        * platform/graphics/cg/ImageSourceCG.cpp:
+        (WebCore::ImageSource::setData):
+        * platform/graphics/cg/PDFDocumentImage.cpp:
+        (WebCore::PDFDocumentImage::createPDFDocument):
+        * platform/graphics/mac/FontCustomPlatformData.cpp:
+        (WebCore::createFontCustomPlatformData):
+        * platform/mac/SharedBufferMac.mm:
+        (WebCore::SharedBuffer::createCFData):
+
+2013-09-12  Zoltan Horvath  <zoltan@webkit.org>
+
+        Move LineInfo class into LineInfo.h
+        https://bugs.webkit.org/show_bug.cgi?id=121191
+
+        Reviewed by David Hyatt.
+
+        No new tests, no behavior change.
+
+        * GNUmakefile.list.am:
+        * Target.pri:
+        * WebCore.vcxproj/WebCore.vcxproj:
+        * WebCore.xcodeproj/project.pbxproj:
+        * rendering/LineInfo.h: Added.
+        (WebCore::LineInfo::LineInfo):
+        (WebCore::LineInfo::isFirstLine):
+        (WebCore::LineInfo::isLastLine):
+        (WebCore::LineInfo::isEmpty):
+        (WebCore::LineInfo::previousLineBrokeCleanly):
+        (WebCore::LineInfo::floatPaginationStrut):
+        (WebCore::LineInfo::runsFromLeadingWhitespace):
+        (WebCore::LineInfo::resetRunsFromLeadingWhitespace):
+        (WebCore::LineInfo::incrementRunsFromLeadingWhitespace):
+        (WebCore::LineInfo::setFirstLine):
+        (WebCore::LineInfo::setLastLine):
+        (WebCore::LineInfo::setEmpty):
+        (WebCore::LineInfo::setPreviousLineBrokeCleanly):
+        (WebCore::LineInfo::setFloatPaginationStrut):
+        * rendering/RenderBlockLineLayout.cpp:
+
+2013-09-12  Bem Jones-Bey  <bjonesbe@adobe.com>
+
+        [CSS Shapes] Remove unnecessarily complex template from ShapeInfo classes
+        https://bugs.webkit.org/show_bug.cgi?id=121213
+
+        Reviewed by Darin Adler.
+
+        These classes were trying to be way too clever, and as a result were
+        hard to read and hard to debug. Replace the complex templated method
+        calls with virtual methods to make these classes much easier to
+        understand and maintain.
+
+        No new tests, no behavior change.
+
+        * rendering/shapes/ShapeInfo.cpp:
+        (WebCore::::computedShape):
+        (WebCore::::computeSegmentsForLine):
+        * rendering/shapes/ShapeInfo.h:
+        * rendering/shapes/ShapeInsideInfo.cpp:
+        (WebCore::ShapeInsideInfo::getShapeValue):
+        * rendering/shapes/ShapeInsideInfo.h:
+        (WebCore::ShapeInsideInfo::computeSegmentsForLine):
+        (WebCore::ShapeInsideInfo::ShapeInsideInfo):
+        * rendering/shapes/ShapeOutsideInfo.cpp:
+        (WebCore::ShapeOutsideInfo::computeSegmentsForLine):
+        (WebCore::ShapeOutsideInfo::getShapeValue):
+        * rendering/shapes/ShapeOutsideInfo.h:
+        (WebCore::ShapeOutsideInfo::ShapeOutsideInfo):
+
+2013-09-12  Zoltan Horvath  <zoltan@webkit.org>
+
+        [CSS Shapes] Turn shape's logicalwidth/height into a LayoutSize
+        https://bugs.webkit.org/show_bug.cgi?id=121187
+
+        Reviewed by David Hyatt.
+
+        No new tests, no behavior change.
+
+        * rendering/shapes/ShapeInfo.cpp:
+        (WebCore::::computedShape):
+        * rendering/shapes/ShapeInfo.h:
+        (WebCore::ShapeInfo::setShapeSize):
+        (WebCore::ShapeInfo::shapeContainingBlockHeight):
+
+2013-09-12  Darin Adler  <darin@apple.com>
+
+        Move layering-violating code from Pasteboard::plainText into Editor (Mac only at first)
+        https://bugs.webkit.org/show_bug.cgi?id=121075
+
+        Reviewed by Anders Carlsson.
+
+        * editing/Editor.cpp:
+        (WebCore::Editor::pasteAsPlainTextBypassingDHTML): Pass pasteboard as a reference.
+        (WebCore::Editor::pasteAsPlainTextWithPasteboard): Use readPlainTextFromPasteboard
+        for Mac. Also update to take a reference.
+        (WebCore::Editor::paste): Pass pasteboard as a reference.
+        (WebCore::Editor::pasteAsPlainText): Ditto.
+        * editing/Editor.h: Ditto.
+
+        * editing/mac/EditorMac.mm:
+        (WebCore::Editor::readSelectionFromPasteboard): Pass pasteboard as a reference.
+        (WebCore::Editor::readPlainTextFromPasteboard): Added. The declaration of this
+        was added (by mistake) in an earlier patch. This has code that used to be inside
+        Pasteboard::plainText.
+
+        * platform/Pasteboard.h: Added PasteboardPlainText. Reorganized functions in the
+        Pasteboard class and added some FIXMEs. Sorted platforms alphabetically and grouped
+        functions together and data members separate from them.
+
+        * platform/mac/DragDataMac.mm:
+        (WebCore::DragData::asPlainText): Updated to call readPlainTextFromPasteboard.
+        (WebCore::DragData::asURL): Tweaked style of unused parameter.
+
+        * platform/mac/PasteboardMac.mm:
+        (WebCore::Pasteboard::read): Renamed this from plainText, and refactored so that
+        the data goes out in the PasteboardPlainText structure.
+
+2013-09-12  Gurpreet Kaur  <k.gurpreet@samsung.com>
+
+        CSS Unit vw in border-width maps to 0px.
+        https://bugs.webkit.org/show_bug.cgi?id=109229
+
+        Reviewed by Darin Adler.
+
+        Border and outline properties were not applied incase
+        its values were given in vh/vw units.
+
+        Tests: fast/css/viewport-height-border.html
+               fast/css/viewport-height-outline.html
+               fast/css/viewport-width-border.html
+               fast/css/viewport-width-outline.html
+
+        * css/CSSPrimitiveValue.cpp:
+        (WebCore::CSSPrimitiveValue::computeLengthDouble):
+        Added case CSS_VH and CSS_VW. 
+        * css/CSSPrimitiveValue.h:
+        (WebCore::CSSPrimitiveValue::isViewportPercentageWidth):
+        (WebCore::CSSPrimitiveValue::isViewportPercentageHeight):
+        Added APIs to check the unit type(CSS_VW and CSS_VH). 
+        * css/DeprecatedStyleBuilder.cpp:
+        (WebCore::ApplyPropertyComputeLength::applyValue):
+        Calculating the border values which has been specified
+        in vh/vw units.The vh/vw units are calcultated as percent
+        of viewport height and viewport width respectively.
+
+2013-09-12  Jocelyn Turcotte  <jocelyn.turcotte@digia.com>
+
+        [Coordinated Graphics] Fix the build on MacOS 10.9
+        https://bugs.webkit.org/show_bug.cgi?id=121225
+
+        Reviewed by Darin Adler.
+
+        * platform/graphics/surfaces/mac/GraphicsSurfaceMac.cpp:
+
+2013-09-12  Mark Lam  <mark.lam@apple.com>
+
+        Change debug hooks to pass sourceID and position info via the DebuggerCallFrame.
+        https://bugs.webkit.org/show_bug.cgi?id=121214.
+
+        Reviewed by Geoffrey Garen.
+
+        No new tests.
+
+        Also changed the Inspector's JavaScriptCallFrame to get the sourceID and
+        position info from its DebuggerCallFrame instead of caching those values.
+
+        * bindings/js/JavaScriptCallFrame.cpp:
+        (WebCore::JavaScriptCallFrame::JavaScriptCallFrame):
+        * bindings/js/JavaScriptCallFrame.h:
+        (WebCore::JavaScriptCallFrame::create):
+        (WebCore::JavaScriptCallFrame::invalidate):
+        (WebCore::JavaScriptCallFrame::sourceID):
+        (WebCore::JavaScriptCallFrame::position):
+        (WebCore::JavaScriptCallFrame::line):
+        (WebCore::JavaScriptCallFrame::column):
+        (WebCore::JavaScriptCallFrame::update):
+        * bindings/js/ScriptDebugServer.cpp:
+        (WebCore::ScriptDebugServer::createCallFrame):
+        (WebCore::ScriptDebugServer::updateCallFrameAndPauseIfNeeded):
+        (WebCore::ScriptDebugServer::callEvent):
+        (WebCore::ScriptDebugServer::atStatement):
+        (WebCore::ScriptDebugServer::returnEvent):
+        (WebCore::ScriptDebugServer::exception):
+        (WebCore::ScriptDebugServer::willExecuteProgram):
+        (WebCore::ScriptDebugServer::didExecuteProgram):
+        (WebCore::ScriptDebugServer::didReachBreakpoint):
+        * bindings/js/ScriptDebugServer.h:
+        * bindings/js/WorkerScriptDebugServer.cpp:
+        (WebCore::WorkerScriptDebugServer::willExecuteProgram):
+        * bindings/js/WorkerScriptDebugServer.h:
+
+2013-09-12  peavo@outlook.com  <peavo@outlook.com>
+
+        [WinCairo] Compile errors, missing include.
+        https://bugs.webkit.org/show_bug.cgi?id=121222
+
+        Reviewed by Brent Fulgham.
+
+        * platform/graphics/win/GlyphPageTreeNodeCairoWin.cpp: Include required header.
+        * platform/win/DragImageCairoWin.cpp: Include required header.
+
+2013-09-12  Vivek Galatage  <vivek.vg@samsung.com>
+
+        XMLSerializer.serializeToString() should throw exception for invalid node value.
+        https://bugs.webkit.org/show_bug.cgi?id=121209
+
+        Reviewed by Darin Adler.
+
+        FF and Opera 12 (pre blink/webkit) throw exception in case the node value is invalid.
+        Blink sends an empty string as the result of serializeToString operation with invalid node.
+        We should match with other browsers for throwing it as an exception.
+
+        Blink review URL: https://chromiumcodereview.appspot.com/23532055/
+
+        Test: fast/dom/xmlserializer-serialize-to-string-exception.html
+
+        * xml/XMLSerializer.cpp:
+        (WebCore::XMLSerializer::serializeToString):
+
+2013-09-12  Zalan Bujtas  <zalan@apple.com>
+
+        Crash in ScrollingStateStickyNode::updateConstraints
+        https://bugs.webkit.org/show_bug.cgi?id=119638
+
+        Reviewed by Simon Fraser.
+
+        Ensure when a scrolling state node is removed from the state tree,
+        we remove both the current node and all its children from the
+        associated m_stateNodeMap lookup table.
+
+        Test: fast/css/sticky/multiple-layers-sticky-crash.html
+
+        * page/scrolling/ScrollingStateNode.cpp:
+        (WebCore::ScrollingStateNode::removeChild):
+        (WebCore::ScrollingStateNode::willBeRemovedFromStateTree):
+        * page/scrolling/ScrollingStateNode.h:
+
+2013-09-12  Zalan Bujtas  <zalan@apple.com>
+
+        REGRESSION (r132516): Javascript menu text incorrectly disappearing and reappearing
+        https://bugs.webkit.org/show_bug.cgi?id=101047
+
+        Reviewed by Simon Fraser.
+
+        Compositing layers keep track of ancestors' clipping by constructing the RenderLayerBacking::m_ancestorClippingLayer.
+        It helps setting up the proper clipping context for the corresponding graphics layer.
+        When a RenderObject's clipping style changes, it needs to propagate this change not only
+        to the associated RenderLayer, but also to the descendants', if applicable.
+        Before r132516, it was mainly covered by initiating full style recalcs, which ensured that
+        style recalc on the descendant rendering tree took care of creating/destroying
+        RenderLayerBacking::m_ancestorClippingLayer at every compositing layer node. Without the full
+        recalc, the clipping of the compositing render layers and the corresponding render subtrees can get out of sync.
+        This patch updates the clipping context on the descendant subtree, when the clipping behaviour
+        changes on a render node.
+
+        Tests: compositing/overflow/clipping-behaviour-change-is-not-propagated-to-descendants.html
+               compositing/overflow/clipping-behaviour-change-is-not-propagated-to-descendants2.html
+
+        * rendering/RenderLayer.cpp:
+        (WebCore::RenderLayer::updateDescendantClippingContext):
+        (WebCore::RenderLayer::styleChanged):
+        * rendering/RenderLayer.h:
+        * rendering/RenderLayerBacking.cpp:
+        (WebCore::RenderLayerBacking::~RenderLayerBacking):
+        (WebCore::RenderLayerBacking::updateGraphicsLayerConfiguration):
+        (WebCore::RenderLayerBacking::updateAncestorClippingLayer):
+        (WebCore::RenderLayerBacking::updateDescendantClippingLayer):
+        * rendering/RenderLayerBacking.h:
+
+2013-09-12  Mikhail Pozdnyakov  <mikhail.pozdnyakov@intel.com>
+
+        Remove home-brewed nullptr
+        https://bugs.webkit.org/show_bug.cgi?id=119624
+
+        Reviewed by Anders Carlsson.
+
+        The standard C++11 nullptr and std::nullptr_t type should be used now.
+
+        * bindings/js/JSDOMBinding.h:
+
+2013-09-12  Samuel White  <samuel_white@apple.com>
+
+        <meter> element text value exposed as AXTitle; should be exposing AXValueDescription
+        https://bugs.webkit.org/show_bug.cgi?id=117651
+
+        Reviewed by Mario Sanchez Prada.
+
+        No new tests, updated accessibility/meter-element to handle platform specific output.
+
+        * accessibility/AccessibilityObject.cpp:
+        (WebCore::AccessibilityObject::isMeter):
+        * accessibility/AccessibilityObject.h:
+        * accessibility/mac/WebAccessibilityObjectWrapperMac.mm:
+        (-[WebAccessibilityObjectWrapper accessibilityAttributeValue:]):
+
+2013-09-12  Santosh Mahto  <santosh.ma@samsung.com>
+
+        class WeekInputType invokes wrong constructor
+        https://bugs.webkit.org/show_bug.cgi?id=120768
+
+        Reviewed by Andreas Kling.
+
+        Correcting wrong constuctor invocation.
+
+        * html/WeekInputType.h:
+        (WebCore::WeekInputType::WeekInputType):
+
+2013-09-12  Samuel White  <samuel_white@apple.com>
+
+        AX: Self-referencing aria-labelledby only uses contents.
+        https://bugs.webkit.org/show_bug.cgi?id=120814
+
+        Reviewed by Mario Sanchez Prada.
+
+        Implemented additional 'Text Alternative Computation' steps documented at:
+        http://www.w3.org/WAI/PF/aria/complete#textalternativecomputation. This allows us to remove
+        our raw text node iteration that was previously forcing us to do our computation incorrectly.
+        Element content is now sourced using textUnderElement (step 2C of the computation).
+
+        Test: accessibility/self-referencing-aria-labelledby.html
+
+        * accessibility/AccessibilityNodeObject.cpp:
+        (WebCore::accessibleNameForNode):
+        (WebCore::AccessibilityNodeObject::accessibilityDescriptionForElements):
+
+2013-09-12  Commit Queue  <commit-queue@webkit.org>
+
+        Unreviewed, rolling out r155597.
+        http://trac.webkit.org/changeset/155597
+        https://bugs.webkit.org/show_bug.cgi?id=121220
+
+        broke windows build because there's no ews :( (Requested by
+        thorton on #webkit).
+
+        * WebCore.exp.in:
+        * platform/graphics/BitmapImage.cpp:
+        (WebCore::BitmapImage::isBitmapImage):
+        * platform/graphics/BitmapImage.h:
+        (WebCore::BitmapImage::create):
+        * platform/graphics/CrossfadeGeneratedImage.cpp:
+        (WebCore::CrossfadeGeneratedImage::CrossfadeGeneratedImage):
+        (WebCore::CrossfadeGeneratedImage::drawPattern):
+        * platform/graphics/CrossfadeGeneratedImage.h:
+        (WebCore::CrossfadeGeneratedImage::setContainerSize):
+        (WebCore::CrossfadeGeneratedImage::usesContainerSize):
+        (WebCore::CrossfadeGeneratedImage::hasRelativeWidth):
+        (WebCore::CrossfadeGeneratedImage::hasRelativeHeight):
+        (WebCore::CrossfadeGeneratedImage::size):
+        * platform/graphics/GeneratedImage.h:
+        (WebCore::GeneratedImage::hasSingleSecurityOrigin):
+        (WebCore::GeneratedImage::setContainerSize):
+        (WebCore::GeneratedImage::usesContainerSize):
+        (WebCore::GeneratedImage::hasRelativeWidth):
+        (WebCore::GeneratedImage::hasRelativeHeight):
+        (WebCore::GeneratedImage::size):
+        (WebCore::GeneratedImage::destroyDecodedData):
+        (WebCore::GeneratedImage::decodedSize):
+        * platform/graphics/GeneratorGeneratedImage.cpp:
+        (WebCore::GeneratorGeneratedImage::draw):
+        (WebCore::GeneratorGeneratedImage::drawPattern):
+        * platform/graphics/GeneratorGeneratedImage.h:
+        (WebCore::GeneratorGeneratedImage::GeneratorGeneratedImage):
+        * svg/graphics/SVGImage.h:
+        (WebCore::SVGImage::isSVGImage):
+        (WebCore::SVGImage::usesContainerSize):
+        (WebCore::SVGImage::destroyDecodedData):
+        (WebCore::SVGImage::decodedSize):
+        * svg/graphics/SVGImageForContainer.h:
+        (WebCore::SVGImageForContainer::destroyDecodedData):
+        (WebCore::SVGImageForContainer::decodedSize):
+
+2013-09-12  Andreas Kling  <akling@apple.com>
+
+        RenderWidget elements are always HTMLFrameOwnerElement subclasses.
+        <https://webkit.org/b/121217>
+
+        Reviewed by Antti Koivisto.
+
+        Make RenderWidget constructor take HTMLFrameOwnerElement* and update subclasses
+        with even tighter types where possible.
+
+        Also added RenderWidget::frameOwnerElement() and deleted element().
+        Removed a handful of unnecessary type checks that were exposed by this.
+
+2013-09-11  Tim Horton  <timothy_horton@apple.com>
+
+        Apply OVERRIDE and FINAL to Image subclasses and clean them up
+        https://bugs.webkit.org/show_bug.cgi?id=121086
+
+        Reviewed by Alexey Proskuryakov.
+
+        Everything other than the copious application of OVERRIDE and FINAL
+        is explicitly called out below.
+
+        * WebCore.exp.in:
+        Export the correct version of getCGImageRef for use by WebKit2.
+
+        * platform/graphics/BitmapImage.cpp:
+        * platform/graphics/BitmapImage.h:
+        Drive-by inline isBitmapImage.
+        Move create(HBITMAP) to be near the other create() functions.
+        Move all of the members and quite a few functions from protected to private.
+        Devirtualize frameCount().
+        Move notSolidColor() near the other solid color functions.
+
+        * platform/graphics/CrossfadeGeneratedImage.cpp:
+        (WebCore::CrossfadeGeneratedImage::CrossfadeGeneratedImage):
+        (WebCore::CrossfadeGeneratedImage::drawPattern):
+        * platform/graphics/GeneratorGeneratedImage.cpp:
+        (WebCore::GeneratorGeneratedImage::draw):
+        (WebCore::GeneratorGeneratedImage::drawPattern):
+        Use size() and setContainerSize() instead of directly accessing a
+        superclass' (now private, previously protected) members.
+
+        * platform/graphics/CrossfadeGeneratedImage.h:
+        * platform/graphics/GeneratedImage.h:
+        Make m_size private, I don't think we do protected members.
+        
+        * platform/graphics/GeneratorGeneratedImage.h:
+        Make all the members private.
+
+        * svg/graphics/SVGImage.h:
+        * svg/graphics/SVGImageForContainer.h:
+
+2013-09-11  Rashmi Shyamasundar  <rashmi.s2@samsung.com>
+
+        Canvas fillText and measureText handle ideographic spaces differently
+        https://bugs.webkit.org/show_bug.cgi?id=108881
+
+        Reviewed by Darin Adler.
+
+        According to spec for text preparation algorithm
+        http://www.whatwg.org/specs/web-apps/current-work/multipage/the-canvas-element.html#text-preparation-algorithm
+        all the space characters mentioned in the spec
+        http://www.whatwg.org/specs/web-apps/current-work/multipage/common-microsyntaxes.html#space-character
+        should be replaced by U+0020 space character.
+        The canvas functions fillText and measureText should run the text preparation algorithm.
+        This patch modifies the canvas functions drawTextInternal and measureText to conform to the above spec.
+
+        Tests: fast/canvas/canvas-measureText-ideographicSpace.html
+
+        * html/canvas/CanvasRenderingContext2D.cpp:
+        (WebCore::shouldSpaceBeReplaced):
+        (WebCore::replaceCharacterInString):
+        (WebCore::CanvasRenderingContext2D::measureText):
+        (WebCore::CanvasRenderingContext2D::drawTextInternal):
+
+2013-09-11  Andreas Kling  <akling@apple.com>
+
+        Fix Windows build.
+
+        * rendering/RenderingAllInOne.cpp:
+
+2013-09-11  Andreas Kling  <akling@apple.com>
+
+        Merge RenderPart into RenderWidget.
+        <https://webkit.org/b/121200>
+
+        Reviewed by Anders Carlsson.
+
+        Remove the RenderPart class and move its functionality into RenderWidget.
+        It was acting as a pointless extra layer between RenderWidget and renderers
+        for embedded objects, frames and iframes.
+
+2013-09-11  Geoffrey Garen  <ggaren@apple.com>
+
+        Removed some unused functions from the debugger interface
+        https://bugs.webkit.org/show_bug.cgi?id=121194
+
+        Reviewed by Joseph Pecoraro.
+
+        We plan to use the "evaluate" API and debugger activation property access for all the features we need.
+
+        * inspector/JavaScriptCallFrame.idl: These are the interfaces I removed.
+
+        * bindings/js/JSJavaScriptCallFrameCustom.cpp:
+        * inspector/InjectedScript.cpp:
+        * inspector/InjectedScript.h:
+        * inspector/InjectedScriptSource.js:
+        * inspector/Inspector.json:
+        * inspector/InspectorDebuggerAgent.cpp:
+        (WebCore::InspectorDebuggerAgent::setScriptSource):
+        * inspector/InspectorDebuggerAgent.h:
+        * inspector/JavaScriptCallFrame.idl:
+        * inspector/front-end/RemoteObject.js:
+        (WebInspector.RemoteObject.prototype.):
+        (WebInspector.RemoteObject.prototype.setPropertyValue): These files are mechanical removals of code that used
+        or implemented the interfaces I removed.
+
+2013-09-11  Vivek Galatage  <vivek.vg@samsung.com>
+
+        DOMParser.parseFromString() should support creating HTML Document with mime-type text/html
+        https://bugs.webkit.org/show_bug.cgi?id=120826
+
+        Reviewed by Darin Adler.
+
+        The specification http://domparsing.spec.whatwg.org/#the-domparser-interface for DOMParser.parseFromString()
+        allows the document creation if the mimeType is one of the supported types:
+        ["text/html", "text/xml", "application/xml", "application/xhtml+xml", "image/svg+xml"]
+
+        Also script elements get marked unexecutable and the contents of noscript get parsed as markup.
+
+        blink review URL: https://codereview.chromium.org/23903014/
+
+        Test: fast/dom/domparser-parsefromstring-mimetype-support.html
+
+        * xml/DOMParser.cpp:
+        (WebCore::DOMParser::parseFromString):
+
+2013-09-11  Hans Muller  <hmuller@adobe.com>
+
+        [CSS Shapes] Improve the performance of image valued shapes
+        https://bugs.webkit.org/show_bug.cgi?id=120211
+
+        Reviewed by Alexandru Chiculita.
+
+        Replaced the implementation of RasterShapeIntervals with one based on the
+        new ShapeInterval<int> class. This eliminates the dependency the Region class
+        and delivers a 10X layout speedup for large image valued shapes.
+
+        This a just an implementation refactoring, no new tests were needed.
+
+        * rendering/shapes/RasterShape.cpp:
+        (WebCore::RasterShapeIntervals::appendInterval): Renamed this method, it was called addInterval().
+        (WebCore::shapeIntervalsContain):
+        (WebCore::RasterShapeIntervals::contains):
+        (WebCore::RasterShapeIntervals::getIntervalsInLine):
+        (WebCore::compareX1):
+        (WebCore::RasterShapeIntervals::firstIncludedIntervalY):
+        (WebCore::RasterShapeIntervals::getIncludedIntervals):
+        (WebCore::RasterShapeIntervals::getExcludedIntervals):
+        (WebCore::RasterShape::getExcludedIntervals):
+        (WebCore::RasterShape::getIncludedIntervals):
+        * rendering/shapes/RasterShape.h:
+        (WebCore::RasterShapeIntervals::RasterShapeIntervals): The constructor now takes a size argument which is used to allocate IntShapeIntervals storage.
+        (WebCore::RasterShapeIntervals::size):
+        (WebCore::RasterShapeIntervals::bounds):
+        (WebCore::RasterShapeIntervals::isEmpty):
+        (WebCore::RasterShapeIntervals::getIntervals):
+        * rendering/shapes/Shape.cpp:
+        (WebCore::Shape::createShape): Use appendInterval() instead of addInterval() (see above) and the new RasterShapeIntervals constructor.
+
+2013-09-11  Eric Carlson  <eric.carlson@apple.com>
+
+        [MediaStream API] Updating NavigatorUserMediaError to match the spec
+        https://bugs.webkit.org/show_bug.cgi?id=120880
+
+        Reviewed by Darin Adler.
+        
+        Merge https://chromium.googlesource.com/chromium/blink/+/f07305e49ddebaa166f5dee514bcc881a8efd341
+        by Tommy Widenflycht.
+
+        The Blink change did not have any test changes because they don't appear to have any tests 
+        for NavigatorUserMediaError. I can't add tests now because the MediaStream feature isn't enabled 
+        yet, so https://bugs.webkit.org/show_bug.cgi?id=121182 tracks adding tests.
+
+        * Modules/mediastream/NavigatorUserMediaError.h:
+        (WebCore::NavigatorUserMediaError::create):
+        (WebCore::NavigatorUserMediaError::name):
+        (WebCore::NavigatorUserMediaError::message):
+        (WebCore::NavigatorUserMediaError::constraintName):
+        (WebCore::NavigatorUserMediaError::NavigatorUserMediaError):
+        * Modules/mediastream/NavigatorUserMediaError.idl:
+        * Modules/mediastream/UserMediaRequest.cpp:
+        (WebCore::UserMediaRequest::fail):
+        (WebCore::UserMediaRequest::failConstraint):
+        * Modules/mediastream/UserMediaRequest.h:
+
+2013-09-11  Thiago de Barros Lacerda  <thiago.lacerda@openbossa.org>
+
+        MediaStream API: Remove LocalMediaStream
+        https://bugs.webkit.org/show_bug.cgi?id=120875
+
+        blink merge: https://chromium.googlesource.com/chromium/blink/+/81643ee3fe048a64fa8931132e1294fa2c8e821a
+
+        Reviewed by Eric Carlson.
+
+        Existing tests were updated.
+
+        * CMakeLists.txt:
+        * DerivedSources.make:
+        * GNUmakefile.list.am:
+        * Modules/mediastream/LocalMediaStream.cpp: Removed.
+        * Modules/mediastream/LocalMediaStream.h: Removed.
+        * Modules/mediastream/LocalMediaStream.idl: Removed.
+        * Modules/mediastream/MediaStream.cpp:
+        (WebCore::MediaStream::stop):
+        * Modules/mediastream/MediaStream.h:
+        * Modules/mediastream/MediaStream.idl:
+        * Modules/mediastream/NavigatorUserMediaSuccessCallback.h:
+        * Modules/mediastream/NavigatorUserMediaSuccessCallback.idl:
+        * Modules/mediastream/UserMediaRequest.cpp:
+        (WebCore::UserMediaRequest::succeed):
+        * Modules/mediastream/UserMediaRequest.h:
+        * Modules/webaudio/AudioContext.cpp:
+        (WebCore::AudioContext::createMediaStreamSource):
+        * Modules/webaudio/MediaStreamAudioDestinationNode.cpp:
+        (WebCore::MediaStreamAudioDestinationNode::MediaStreamAudioDestinationNode):
+        * WebCore.xcodeproj/project.pbxproj:
+        * dom/EventTarget.h:
+        * dom/EventTargetFactory.in:
+        * platform/mediastream/MediaStreamDescriptor.h:
+
+2013-09-11  Timothy Hatcher  <timothy@apple.com>
+
+        Remove PlatformInstrumentation since we don't show decode or resize in the new Web Inspector
+        https://bugs.webkit.org/show_bug.cgi?id=121181
+
+        Reviewed by Joseph Pecoraro.
+
+        * CMakeLists.txt:
+        * GNUmakefile.list.am:
+        * Target.pri:
+        * WebCore.order:
+        * WebCore.vcxproj/WebCore.vcxproj:
+        * WebCore.vcxproj/WebCore.vcxproj.filters:
+        * WebCore.xcodeproj/project.pbxproj:
+        * inspector/InspectorTimelineAgent.cpp:
+        (WebCore::InspectorTimelineAgent::willPaint):
+        (WebCore::InspectorTimelineAgent::didCompleteCurrentRecord):
+        (WebCore::InspectorTimelineAgent::InspectorTimelineAgent):
+        (WebCore::InspectorTimelineAgent::pushCurrentRecord):
+        (WebCore::InspectorTimelineAgent::clearRecordStack):
+        * inspector/InspectorTimelineAgent.h:
+        * platform/PlatformInstrumentation.cpp: Removed.
+        * platform/PlatformInstrumentation.h: Removed.
+        * platform/image-decoders/bmp/BMPImageDecoder.cpp:
+        (WebCore::BMPImageDecoder::frameBufferAtIndex):
+        * platform/image-decoders/gif/GIFImageDecoder.cpp:
+        (WebCore::GIFImageDecoder::frameBufferAtIndex):
+        * platform/image-decoders/ico/ICOImageDecoder.cpp:
+        (WebCore::ICOImageDecoder::frameBufferAtIndex):
+        * platform/image-decoders/jpeg/JPEGImageDecoder.cpp:
+        (WebCore::JPEGImageDecoder::frameBufferAtIndex):
+        * platform/image-decoders/png/PNGImageDecoder.cpp:
+        (WebCore::PNGImageDecoder::frameBufferAtIndex):
+        * platform/image-decoders/webp/WEBPImageDecoder.cpp:
+        (WebCore::WEBPImageDecoder::frameBufferAtIndex):
+
+2013-09-11  Brent Fulgham  <bfulgham@apple.com>
+
+        [Windows] Avoid converting from IntSize->SIZE->IntSize.
+        https://bugs.webkit.org/show_bug.cgi?id=121180
+
+        Reviewed by Anders Carlsson.
+
+        * platform/graphics/BitmapImage.h: Take const IntSize* as
+        argument, rather than LPSIZE.
+        * platform/graphics/Image.h: Ditto.
+        (WebCore::Image::getHBITMAPOfSize):
+        * platform/graphics/win/ImageCGWin.cpp:
+        (WebCore::BitmapImage::getHBITMAPOfSize): Use passed-in
+        IntSize, rather than converting from SIZE.
+        * platform/graphics/win/ImageCairoWin.cpp:
+        (WebCore::BitmapImage::getHBITMAPOfSize): Ditto.
+
 2013-09-11  Zoltan Horvath  <zoltan@webkit.org>
 
         Unreviewed debug build fix after r155567.