LayoutTests:

        Reviewed by Darin.

        - pixel test for http://bugs.webkit.org/show_bug.cgi?id=13767
          REGRESSION: Multipart image documents are garbled

        * http/tests/multipart/invalid-image-data-standalone-expected.checksum: Added.
        * http/tests/multipart/invalid-image-data-standalone-expected.png: Added.
        * http/tests/multipart/invalid-image-data-standalone-expected.txt: Added.
        * http/tests/multipart/invalid-image-data-standalone.html: Added.
        * http/tests/multipart/resources/green-100x100.png: Added.

WebCore:

        Reviewed by Darin.

        - fix http://bugs.webkit.org/show_bug.cgi?id=13767
          REGRESSION: Multipart image documents are garbled

        Test: http/tests/multipart/invalid-image-data-standalone.html

        * loader/DocumentLoader.cpp:
        (WebCore::DocumentLoader::isLoadingMultipartContent): Added.
        * loader/DocumentLoader.h:
        * loader/ImageDocument.cpp:
        (WebCore::ImageTokenizer::finish): If the image is multipart, make a copy
        of the current part instead of using the resource data, which is going to be
        overwritten by the next part.
        * loader/MainResourceLoader.h:
        (WebCore::MainResourceLoader::isLoadingMultipartContent): Added.

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@21760 268f45cc-cd09-0410-ab3c-d52691b4dbfc

    Fix no-svg build.

        * bindings/js/kjs_html.cpp:
        (KJS::HTMLElementFunction::callAsFunction):

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@21759 268f45cc-cd09-0410-ab3c-d52691b4dbfc

    Reviewed by Mitz.

        <rdar://problem/5226788> After resizing the window larger than the image, hovering over the image still shows magnify glass

        One part of the bug was already fixed by my previous commit. This fixes the case where the window is sized so the image fit
        after it has been zoomed in.

        * loader/ImageDocument.cpp:
        (WebCore::ImageDocument::windowSizeChanged):

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@21758 268f45cc-cd09-0410-ab3c-d52691b4dbfc

    Reviewed by Anders and Tim

        - fixed <rdar://problem/5226000> REGRESSION: In Gmail and Mail, a hang occurs when attempting
          to grammar/spellcheck a word in a reply

        * WebCoreSupport/WebEditorClient.mm:
        (WebEditorClient::checkGrammarOfString):
        Fixed recently-introduced false assumption that NSNotFound == -1

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@21757 268f45cc-cd09-0410-ab3c-d52691b4dbfc

    Reviewed by Anders and Tim

        - WebCore change for:
          <rdar://problem/5226000> REGRESSION: In Gmail and Mail, a hang occurs when attempting to grammar/spellcheck a word in a reply

        * editing/Editor.cpp:
        (WebCore::findFirstBadGrammarInRange):
        Use the more obvious way to check whether a range is empty. In this case the more obvious way
        would also have caused no problem to occur. Also added an assertion. Though this change is
        enough to fix the symptom of the bug, the real fix is in WebKit.

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@21756 268f45cc-cd09-0410-ab3c-d52691b4dbfc

    Reviewed by Darin (Sorta).

        * loader/ImageDocument.cpp:
        (WebCore::ImageDocument::restoreImageSize):
        Use removeProperty here.

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@21755 268f45cc-cd09-0410-ab3c-d52691b4dbfc

The http loader should only ask for http cookies. (not, for example, data: cookies)

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@21754 268f45cc-cd09-0410-ab3c-d52691b4dbfc

For the keyDown binding use QStringList instead of QList<QString>. The former is a default
registered metatype. Also print out critical messages in dumprendertree's qt message handler.

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@21752 268f45cc-cd09-0410-ab3c-d52691b4dbfc

Fix crash in Qt JavaScript bindings when the arguments used on the Qt side are not
registered with QMetaType.

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@21751 268f45cc-cd09-0410-ab3c-d52691b4dbfc

    Reviewed by Darin Adler.

        Some cleanup to Cache while Fixing <rdar://problem/5055182> The page cache
        has no global cap.

        * loader/Cache.cpp: Removed destructor to help identify this class as a
        singleton.

        * loader/Cache.h: Made constructor and destructor private to match the
        singleton model of PageCache.

        Put structs related to Cache inside its declaration to fix some namespace
        conflicts I had while writing my patch. (They don't exist anymore, but
        I figured this might help future development.)

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@21750 268f45cc-cd09-0410-ab3c-d52691b4dbfc

    Reviewed by Darin Adler.

        Fixed a bug with Settings where a number of different objects held bare
        Settings* data members, even though the Page owns the Settings object and
        deletes it upon destruction.

        Added NULL checks since the Page can be deleted before the frame/document.

        * page/Settings.cpp: Removed reliance on setNeedsReapplyStylesForSettingsChange.

        * css/cssstyleselector.cpp: CSSStyleSelector was the worst offender. It
        held a number of back pointers that were not guaranteed. I removed the
        Settings*, Frame*, and FrameView* back pointers, but others could probably
        go, too. I replaced them with a single Document* pointer, which is guaranteed
        because the Document owns the CSSStyleSelector.

        * page/Page.cpp: Removed setNeedsReapplyStylesForSettingsChange -- the
        Settings object is now a proper subcontroller of Page, so it doesn't need
        to use a global table to find its page anymore. Also, this function
        confusingly implied that the Frames in a page can have heterogeneous settings,
        which is not true.

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@21749 268f45cc-cd09-0410-ab3c-d52691b4dbfc

    Reviewed by Geoff.

        Fix for <rdar://problem/5023545> QuickBooks Pro 2007:hang/crash
        after closing QuickBooks Tutorial Center with Leopard9A377

        We can hit a race condition where drawRect will be called after the
        WebView has closed. Quickbooks does not properly close the WebView
        and set the UIDelegate to nil, so the UIDelegate is stale and we
        crash. This is a regression because the code that uses the
        UIDelegate in the drawRect code path was only added recently. The
        method that the UIDelegate calls into is new -- it does not exist
        on Tiger -- so there is no harm in not running this code for
        applications linked against older WebKits. Other applications may
        run into this same bug so I am not doing a bundle
        check...particularly because, as I mentioned, the new UIDelegate
        call would not be implemented by older clients anyway.

        * Misc/WebKitVersionChecks.h:
        * WebView/WebHTMLView.mm:
        (-[WebHTMLView drawSingleRect:]):

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@21748 268f45cc-cd09-0410-ab3c-d52691b4dbfc

    Make sure -webkit-border-fit accounts for padding as well as border.

        Reviewed by aroben

        * rendering/RenderBlock.cpp:
        (WebCore::RenderBlock::borderFitAdjust):

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@21747 268f45cc-cd09-0410-ab3c-d52691b4dbfc

    Rework line numbering (again).  This time I finally think I have
        it right for all the document.write insanity that can occur.

        Reviewed by aroben

        * html/HTMLParser.cpp:
        (WebCore::HTMLParser::reportErrorToConsole):
        * html/HTMLParserErrorCodes.cpp:
        (WebCore::htmlParserDocumentWriteMessage):
        * html/HTMLParserErrorCodes.h:
        * html/HTMLTokenizer.cpp:
        (WebCore::HTMLTokenizer::write):
        * html/HTMLTokenizer.h:
        (WebCore::HTMLTokenizer::lineNumberPtr):
        (WebCore::HTMLTokenizer::processingContentWrittenByScript):
        * platform/SegementedSring.cpp
        (WebCore::SegmentedString::setExcludeLineNumbers):
        * platform/SegmentedString.h:
        (WebCore::SegmentedSubstring::SegmentedSubstring):
        (WebCore::SegmentedSubstring::clear):
        (WebCore::SegmentedSubstring::excludeLineNumbers):
        (WebCore::SegmentedSubstring::setExcludeLineNumbers):
        (WebCore::SegmentedString::excludeLineNumbers):
        (WebCore::SegmentedString::advance):

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@21746 268f45cc-cd09-0410-ab3c-d52691b4dbfc

    Reviewed by Adam Roben.

        Added a debug-only CachedPage counter. This helped me track down an SVG
        timer bug in my recent page cache work.

        * history/CachedPage.cpp:

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@21745 268f45cc-cd09-0410-ab3c-d52691b4dbfc

    Improve <form> error reporting to catch <form>s inside table parts.
        Tweak the wording of some of the error messages to be a bit better.

        Reviewed by olliej

        * html/HTMLParser.cpp:
        (WebCore::HTMLParser::insertNode):
        (WebCore::HTMLParser::processCloseTag):
        (WebCore::HTMLParser::popBlock):
        * html/HTMLParserErrorCodes.cpp:
        (WebCore::htmlParserErrorMessageTemplate):
        * html/HTMLParserErrorCodes.h:

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@21743 268f45cc-cd09-0410-ab3c-d52691b4dbfc

LayoutTests:

        Reviewed by Hyatt.

        Test cases for:
        http://bugs.webkit.org/show_bug.cgi?id=4104
        first-letter not updating style with hover
        http://bugs.webkit.org/show_bug.cgi?id=13169
        css-formatted first letter won't hide dynamically

        * fast/css/first-letter-hover-expected.checksum: Added.
        * fast/css/first-letter-hover-expected.png: Added.
        * fast/css/first-letter-hover-expected.txt: Added.
        * fast/css/first-letter-hover.html: Added.
        * fast/css/first-letter-visibility-expected.checksum: Added.
        * fast/css/first-letter-visibility-expected.png: Added.
        * fast/css/first-letter-visibility-expected.txt: Added.
        * fast/css/first-letter-visibility.html: Added.

WebCore:

        Reviewed by Hyatt.

        http://bugs.webkit.org/show_bug.cgi?id=4104
        first-letter not updating style with hover
        http://bugs.webkit.org/show_bug.cgi?id=13169
        css-formatted first letter won't hide dynamically

        Update first letter when RenderBlock::setStyle is called.

        * css/cssstyleselector.cpp:
        (WebCore::CSSStyleSelector::checkOneSelector):
        * dom/Document.cpp:
        (WebCore::Document::Document):
        (WebCore::Document::createElement):
        * dom/Document.h:
        (WebCore::Document::usesFirstLetterRules):
        (WebCore::Document::setUsesFirstLetterRules):
        * rendering/RenderBlock.cpp:
        (WebCore::RenderBlock::setStyle):
        (WebCore::RenderBlock::updateFirstLetter):

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@21742 268f45cc-cd09-0410-ab3c-d52691b4dbfc

    Reviewed by Darin.

        - http://bugs.webkit.org/show_bug.cgi?id=13823
          REGRESSION: fast/forms/select-item-background-clip.html failing pixel test

        Updated the test and the results.

        * fast/forms/select-item-background-clip-expected.checksum:
        * fast/forms/select-item-background-clip-expected.png:
        * fast/forms/select-item-background-clip-expected.txt:
        * fast/forms/select-item-background-clip.html:

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@21740 268f45cc-cd09-0410-ab3c-d52691b4dbfc

LayoutTests:

        Reviewed by Darin.

        - test for http://bugs.webkit.org/show_bug.cgi?id=13800
          REGRESSION: Moving a slider moves another unrelated slider

        * fast/forms/slider-thumb-shared-style-expected.checksum: Added.
        * fast/forms/slider-thumb-shared-style-expected.png: Added.
        * fast/forms/slider-thumb-shared-style-expected.txt: Added.
        * fast/forms/slider-thumb-shared-style.html: Added.

WebCore:

        Reviewed by Darin.

        - fix http://bugs.webkit.org/show_bug.cgi?id=13800
          REGRESSION: Moving a slider moves another unrelated slider

        Test: fast/forms/slider-thumb-shared-style.html

        RenderSlider mutates the thumb's style, therefore it must not be shared
        with another slider's thumb, a situation that could occur if the sliders
        themselves shared style.

        * rendering/RenderSlider.cpp:
        (WebCore::RenderSlider::createThumbStyle): Always use a private copy for
        the thumb style.

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@21739 268f45cc-cd09-0410-ab3c-d52691b4dbfc

LayoutTests:

        Reviewed by Darin.

        Test for <rdar://problem/5211921> Form values sometimes get transposed (iGoogle)

        * fast/history/redirect-load-no-form-restoration-expected.txt: Added.
        * fast/history/redirect-load-no-form-restoration.html: Added.
        * fast/history/resources/redirect-load.html: Added.

WebCore:

        Reviewed by Darin.

        Fix for <rdar://problem/5211921> Form values sometimes get transposed (iGoogle)

        Test: fast/history/redirect-load-no-form-restoration.html

        * history/HistoryItem.cpp:
        (WebCore::HistoryItem::setURL): Clear the document state when the url changes for a HistoryItem.
        (WebCore::HistoryItem::isCurrentDocument): Added. Compares the HistoryItem url to the document's url.  This might not be the best way to do this, but it works for now.
        * history/HistoryItem.h:
        * loader/FrameLoader.cpp: (WebCore::FrameLoader::saveDocumentState): Only set the document (and form) state if the document is current for the history item.

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@21738 268f45cc-cd09-0410-ab3c-d52691b4dbfc

    Reviewed by Darin

        Patch for http://bugs.webkit.org/show_bug.cgi?id=13855
        Port patch 666176 to JavaScriptCore

        - Renamed JSValue::downcast() to JSValue::asCell() which makes the
        function meaning cleaner. It's modeled after Harri Porten change in
        KDE trunk.

        * kjs/collector.cpp:
        (KJS::Collector::protect):
        (KJS::Collector::unprotect):
        (KJS::Collector::collectOnMainThreadOnly):
        * kjs/object.h:
        (KJS::JSValue::isObject):
        * kjs/string_object.cpp:
        (KJS::StringProtoFunc::callAsFunction):
        * kjs/value.h:
        (KJS::JSValue::asCell):
        (KJS::JSValue::isNumber):
        (KJS::JSValue::isString):
        (KJS::JSValue::isObject):
        (KJS::JSValue::getNumber):
        (KJS::JSValue::getString):
        (KJS::JSValue::getObject):
        (KJS::JSValue::getUInt32):
        (KJS::JSValue::mark):
        (KJS::JSValue::marked):
        (KJS::JSValue::type):
        (KJS::JSValue::toPrimitive):
        (KJS::JSValue::toBoolean):
        (KJS::JSValue::toNumber):
        (KJS::JSValue::toString):
        (KJS::JSValue::toObject):

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@21736 268f45cc-cd09-0410-ab3c-d52691b4dbfc

Update results for better whitespace handling in framesets and tables.

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@21735 268f45cc-cd09-0410-ab3c-d52691b4dbfc

LayoutTests:

        Reviewed by Adele.

        - test for http://bugs.webkit.org/show_bug.cgi?id=13857
          REGRESSION: onChange function applied to select element executes twice when focus is set

        * fast/forms/select-double-onchange-expected.txt: Added.
        * fast/forms/select-double-onchange.html: Added.

WebCore:

        Reviewed by Adele.

        - fix http://bugs.webkit.org/show_bug.cgi?id=13857
          REGRESSION: onChange function applied to select element executes twice when focus is set

        Test: fast/forms/select-double-onchange.html

        * html/HTMLSelectElement.cpp:
        (WebCore::HTMLSelectElement::menuListOnChange): Changed to update m_lastOnChangeIndex
        before dispatching the change event to avoid reentrancy.

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@21734 268f45cc-cd09-0410-ab3c-d52691b4dbfc

Update results for better whitespace handling in framesets and tables.

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@21733 268f45cc-cd09-0410-ab3c-d52691b4dbfc

    Reviewed by Hyatt.

        - fix <rdar://problem/5226451> REGRESSION (21618): Mail block quotes
          are missing the lines on the side

        This patch fixes three problems:

        1) makes the "skip canLoad check" boolean also skip the check
           that prevents any loads while the document is in provisional
           state; this is the proximate cause of the bug

        * loader/SubresourceLoader.cpp: (WebCore::SubresourceLoader::create):
        Don't check the frame's state if skipCanLoadCheck is true.

        2) moves the "skip canLoad check" boolean to the Request object;
           the old implementation would cause that flag to affect the
           new request we served, which might not be the resource with
           that flag set

        3) fixes error-handling code path that would leak requests

        * html/HTMLImageLoader.cpp: (WebCore::HTMLImageLoader::updateFromElement):
        Pass false to the CachedImage constructor to indicate we are not making
        this object for the cache.

        * loader/Cache.cpp:
        (WebCore::createResource): Pass true to the CachedImage constructor to
        indicate we are making this object for the cache.
        (WebCore::Cache::requestResource): Add new code that assumes the object
        will already have the inCache bit set, and that will delete the object
        and return 0 if the cache is disabled and the load failed.

        * loader/CachedImage.h:
        * loader/CachedImage.cpp: (WebCore::CachedImage::CachedImage):
        Added a forCache boolean parameter. Always false for the constructor
        that's only used outside the cache code, and passed in as a boolean
        for the constructor that's used both in cache and outside cache.

        * loader/CachedResource.h:
        * loader/CachedResource.cpp:
        (WebCore::CachedResource::CachedResource): Added a forCache boolean
        parameter that determines the initial state of the m_inCache flag.
        This is needed to prevent a resource from being destroyed if an
        error occurs during the initial load.

        * loader/DocLoader.cpp:
        (WebCore::DocLoader::requestCSSStyleSheet): Added FIXME.
        (WebCore::DocLoader::setLoadInProgress): Added null check.

        * loader/Request.h:
        * loader/Request.cpp: (WebCore::Request::Request):
        Added a shouldSkipCanLoadCheck boolean here, since we need to track
        this for each request.

        * loader/loader.h:
        * loader/loader.cpp:
        (WebCore::Loader::load): Pass the skipCanLoadCheck boolean to the
        Request constructor rather than to the servePendingRequests function.
        (WebCore::Loader::servePendingRequests): Add a loop so we can handle
        cases where the request fails immediately without leaking the request
        and thinking that we're loading forever.

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@21732 268f45cc-cd09-0410-ab3c-d52691b4dbfc

    Add error reporting for residual style.

        Reviewed by aroben

        * html/HTMLParser.cpp:
        (WebCore::HTMLParser::handleResidualStyleCloseTagAcrossBlocks):
        (WebCore::HTMLParser::reopenResidualStyleTags):
        * html/HTMLParserErrorCodes.cpp:
        (WebCore::htmlParserErrorMessageTemplate):
        * html/HTMLParserErrorCodes.h:

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@21731 268f45cc-cd09-0410-ab3c-d52691b4dbfc

    * English.lproj/StringsNotToBeLocalized.txt: Update for recent changes.

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@21730 268f45cc-cd09-0410-ab3c-d52691b4dbfc

Land updated tests.

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@21729 268f45cc-cd09-0410-ab3c-d52691b4dbfc

2007-05-24  Oliver Hunt  <oliver@apple.com>

        Reviewed by Adam, Darin, and Geoff.

        Fix for <rdar://problem/5000470> REGRESSION: The IM reconvert
        function returns incorrect symbol due to inconsistent range
        domains in TSM

        Text Services Management uses ranges provided by the
        NSTextInput API to index into the string return by
        -[WebHTMLView string]. As a result some input methods
        incorrectly get their candidate text from the beginning
        of the document instead of from the input element.

        TSM prefers to query -textStorage over -string so as a
        workaround we provide an implementation of -textStorage that
        returns the content of the current text input.  TSM only ever
        queries the result of textStorage as an NSAttributedString so
        we do not need to implement a fake NSTextStorage class

        This should not cause harm to anything else as textStorage is
        actually a method on NSTextView, which we clearly are not. TSM
        only queries the method because it uses respondsToSelector to
        control behaviour.

        * WebView/WebHTMLView.mm:
        (-[WebHTMLView textStorage]):

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@21728 268f45cc-cd09-0410-ab3c-d52691b4dbfc

    Report <script/> as a warning instead of an error for now, since we
        actually do close it.  (Sigh.)

        Reviewed by beth

        * html/HTMLParser.cpp:
        (WebCore::HTMLParser::parseToken):
        (WebCore::HTMLParser::reportErrorToConsole):
        * html/HTMLParserErrorCodes.cpp:
        (WebCore::htmlParserErrorMessageTemplate):
        (WebCore::isWarning):
        * html/HTMLParserErrorCodes.h:

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@21727 268f45cc-cd09-0410-ab3c-d52691b4dbfc

    Add error reporting for the </p> -> <p></p> quirk.

        Add error reporting when a stray close tag is encountered with no
        corresponding open tag.

        Reviewed by adele

        * html/HTMLParser.cpp:
        (WebCore::HTMLParser::HTMLParser):
        (WebCore::HTMLParser::processCloseTag):
        (WebCore::HTMLParser::popBlock):
        * html/HTMLParser.h:
        (WebCore::HTMLParser::popBlock):
        * html/HTMLParserErrorCodes.cpp:
        (WebCore::htmlParserErrorMessageTemplate):
        * html/HTMLParserErrorCodes.h:

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@21726 268f45cc-cd09-0410-ab3c-d52691b4dbfc

    Reviewed by.

        - Do you ever feel like Charlie Brown? *sigh*

        * fast/dom/HTMLHeadElement/resources/head-check.js:

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@21725 268f45cc-cd09-0410-ab3c-d52691b4dbfc

LayoutTests:

        Reviewed by.

        - Rolling back change to fix the build until I have a good fix for data: urls.

        * ChangeLog:
        * fast/dom/HTMLHeadElement/resources/head-check.js:
        * fast/dom/frame-loading-via-document-write-expected.txt: Removed.
        * fast/dom/frame-loading-via-document-write.html: Removed.
        * fast/dom/resources/frame-loading-via-document-write.js: Removed.
        * fast/dom/resources/green250x50.png: Removed.
        * fast/dom/resources/success.html: Removed.
        * http/tests/security/frame-loading-via-document-write-expected.txt: Removed.
        * http/tests/security/frame-loading-via-document-write.html: Removed.
        * http/tests/security/resources/frame-loading-via-document-write.js: Removed.
        * http/tests/security/resources/success.html: Removed.

WebCore:

        Reviewed by.

        - Rolling back change to fix the build until I have a good fix for data: urls.

        * ChangeLog:
        * loader/FrameLoader.cpp:
        (WebCore::FrameLoader::load):
        (WebCore::FrameLoader::open):
        * platform/String.cpp:

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@21724 268f45cc-cd09-0410-ab3c-d52691b4dbfc

    Add two more error messages to the HTMLParser.

        Report when the </br> -> <br> quirk is triggered.

        Also report whenever the broken XML self-closing tag syntax is used on
        tags that can actually have an end tag (either optional or required).

        Reviewed by aroben

        * html/HTMLParser.cpp:
        (WebCore::HTMLParser::parseToken):
        * html/HTMLParserErrorCodes.cpp:
        (WebCore::htmlParserErrorMessageTemplate):
        * html/HTMLParserErrorCodes.h:
        (WebCore::):
        * html/HTMLTokenizer.cpp:
        (WebCore::HTMLTokenizer::parseTag):
        * html/HTMLTokenizer.h:
        (WebCore::Token::reset):

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@21723 268f45cc-cd09-0410-ab3c-d52691b4dbfc

    Reviewed by Anders.

        Rename JSHTMLFrameSetCustom.cpp to JSHTMLFrameSetElementCustom.cpp
        for consistency.

        * WebCore.xcodeproj/project.pbxproj:
        * bindings/js/JSHTMLFrameSetCustom.cpp: Removed.
        * bindings/js/JSHTMLFrameSetElementCustom.cpp: Added.

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@21721 268f45cc-cd09-0410-ab3c-d52691b4dbfc

    Fix for <rdar://problem/5208440> (13753)

        REGRESSION: Raw text needs to be pulled outside of tables

        Reviewed by aroben

        * html/HTMLParser.cpp:
        (WebCore::HTMLParser::handleError):
        * html/HTMLTableColElement.cpp:
        (WebCore::HTMLTableColElement::checkDTD):
        * html/HTMLTableElement.cpp:
        (WebCore::HTMLTableElement::checkDTD):
        * html/HTMLTableRowElement.cpp:
        (WebCore::HTMLTableRowElement::checkDTD):
        * html/HTMLTableSectionElement.cpp:
        (WebCore::HTMLTableSectionElement::checkDTD):

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@21720 268f45cc-cd09-0410-ab3c-d52691b4dbfc

LayoutTests:

        Reviewed by Darin.

        - pixel test for http://bugs.webkit.org/show_bug.cgi?id=13837
          Separator in new <select> widget disappears when block element with border is in document.

        * fast/forms/menulist-separator-painting-expected.checksum: Added.
        * fast/forms/menulist-separator-painting-expected.png: Added.
        * fast/forms/menulist-separator-painting-expected.txt: Added.
        * fast/forms/menulist-separator-painting.html: Added.

WebCore:

        Reviewed by Darin.

        - fix http://bugs.webkit.org/show_bug.cgi?id=13837
          Separator in new <select> widget disappears when block element with border is in document.

        Test: fast/forms/menulist-separator-painting.html

        * platform/graphics/cg/GraphicsContextCG.cpp:
        (WebCore::GraphicsContext::drawConvexPolygon): Changed this function to
        actually do both filling and stroking when needed, even though all existing
        callers set the stroke to none.
        * rendering/RenderThemeMac.mm:
        (WebCore::RenderThemeMac::paintMenuListButton): Added calls to set the stroke
        style and thickness when painting the arrows and the separator.

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@21719 268f45cc-cd09-0410-ab3c-d52691b4dbfc

    Reviewed by Sam Weinig.

        Remove the OBJC_NEW_PROPERTIES #ifdef and only export the new @property syntax.

        * bindings/objc/DOMObject.h:
        * bindings/scripts/CodeGeneratorObjC.pm:

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@21718 268f45cc-cd09-0410-ab3c-d52691b4dbfc

LayoutTests:

        Reviewed by Anders.

        - update results to account for the new JSHTMLFrameSetElement
          that is being autogenerated and can now produce a constructor.

        * fast/dom/Window/element-constructors-on-window-expected.txt:
        * fast/dom/Window/window-properties-expected.txt:

WebCore:

        Reviewed by Anders.

        Uncomment HTMLFramesSetElement constructor now that it exists.

        * page/DOMWindow.idl:

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@21716 268f45cc-cd09-0410-ab3c-d52691b4dbfc

    Try fixing the buildbot build.

        * loader/ImageDocument.cpp:
        (WebCore::ImageDocument::resizeImageToFit):
        (WebCore::ImageDocument::imageClicked):

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@21715 268f45cc-cd09-0410-ab3c-d52691b4dbfc

    Reviewed by Darin.

        Patch for http://bugs.webkit.org/show_bug.cgi?id=13853
        Autogenerate the JS bindings for the HTMLFrameSetElement

        * DerivedSources.make:
        * WebCore.pro:
        * WebCore.xcodeproj/project.pbxproj:
        * bindings/js/JSHTMLElementWrapperFactory.cpp:
        * bindings/js/JSHTMLFrameSetCustom.cpp: Added.
        (WebCore::JSHTMLFrameSetElement::canGetItemsForName):
        (WebCore::JSHTMLFrameSetElement::nameGetter):
        * bindings/js/kjs_html.cpp:
        (KJS::):
        (KJS::JSHTMLElement::classInfo):
        (KJS::JSHTMLElement::accessors):
        (KJS::JSHTMLElement::getOwnPropertySlot):
        * bindings/js/kjs_html.h:
        (KJS::JSHTMLElement::):
        * html/HTMLFrameSetElement.idl:

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@21714 268f45cc-cd09-0410-ab3c-d52691b4dbfc

Remove conflict markers.

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@21713 268f45cc-cd09-0410-ab3c-d52691b4dbfc

Fixing check for incorrent font size - it should
check fixed not normal.

r=andersca

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@21711 268f45cc-cd09-0410-ab3c-d52691b4dbfc

    Reviewed by Tim Hatcher.

        <rdar://problem/5225343> REGRESSION: With View Source window opened, navigating to a different URL in the browser window results in a crash at WebCore::FrameLoader::frameHasLoaded()

        _private->loader->frameLoader() was not being nil checked.
        * WebView/WebDataSource.mm:
        (-[WebDataSource request]):
        Add nil check for _private->loader->frameLoader()

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@21710 268f45cc-cd09-0410-ab3c-d52691b4dbfc

Fix multipart HTTP POSTs in the Qt port

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@21709 268f45cc-cd09-0410-ab3c-d52691b4dbfc

    Speculative buildbot build fix.

        * css/cssstyleselector.cpp:
        (WebCore::CSSStyleSelector::applyProperty):

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@21708 268f45cc-cd09-0410-ab3c-d52691b4dbfc

Didn't mean to commit this

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@21707 268f45cc-cd09-0410-ab3c-d52691b4dbfc

Made Chrome::addMessageToConsole more flexible

addMessageToConsole now takes two additional parameters to specify the
message source (HTML, JS, CSS, XML) and level (error, warning, log). To
maintain our old behavior, all current messages were given
JSMessageSource and ErrorMessageLevel parameters. Messages matching
these characteristics are passed up to the ChromeClient.

Reviewed by Hyatt.

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@21706 268f45cc-cd09-0410-ab3c-d52691b4dbfc

    Rework how HTML handles line numbering so that it is not fooled by
        \r without a following \n and so that document.write doesn't lead
        to line numbering confusion.

        Reviewed by aroben

        * html/HTMLParser.cpp:
        (WebCore::HTMLParser::reportErrorToConsole):
        * html/HTMLTokenizer.cpp:
        (WebCore::HTMLTokenizer::processListing):
        (WebCore::HTMLTokenizer::parseSpecial):
        (WebCore::HTMLTokenizer::parseComment):
        (WebCore::HTMLTokenizer::parseServer):
        (WebCore::HTMLTokenizer::parseProcessingInstruction):
        (WebCore::HTMLTokenizer::parseText):
        (WebCore::HTMLTokenizer::parseEntity):
        (WebCore::HTMLTokenizer::parseTag):
        (WebCore::HTMLTokenizer::write):
        (WebCore::HTMLTokenizer::processToken):
        (WebCore::HTMLTokenizer::setSrc):
        * html/HTMLTokenizer.h:
        (WebCore::HTMLTokenizer::lineNumberPtr):
        * html/HTMLViewSourceDocument.cpp:
        (WebCore::HTMLViewSourceDocument::addLine):
        * loader/TextDocument.cpp:
        (WebCore::TextTokenizer::write):
        * platform/SegmentedString.cpp:
        (WebCore::SegmentedString::SegmentedString):
        (WebCore::SegmentedString::operator=):
        (WebCore::SegmentedString::clear):
        * platform/SegmentedString.h:
        (WebCore::SegmentedString::SegmentedString):
        (WebCore::SegmentedString::advance):
        (WebCore::SegmentedString::escaped):

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@21704 268f45cc-cd09-0410-ab3c-d52691b4dbfc

Update some tests that darin missed.

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@21703 268f45cc-cd09-0410-ab3c-d52691b4dbfc

Land corrected background shorthand test now that I yanked the bogus alert.

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@21702 268f45cc-cd09-0410-ab3c-d52691b4dbfc

Share WebCoreHttp and therefore HTTP connections among multiple
QWebNetworkInterface instances by moving the code into
QWebNetworkManager.

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@21701 268f45cc-cd09-0410-ab3c-d52691b4dbfc

Remove a stray alert in a testcase that I wrote a while back.

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@21700 268f45cc-cd09-0410-ab3c-d52691b4dbfc

Add a table test for comment nodes.

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@21699 268f45cc-cd09-0410-ab3c-d52691b4dbfc

    Make the delete/InsertRows/Cells methods as well as the rowIndex method
        able to work properly even when whitespace or comment nodes are present.

        Reviewed by aroben

        fast/table/rowindex-comment-nodes.html

        * html/HTMLTableRowElement.cpp:
        (WebCore::HTMLTableRowElement::rowIndex):
        (WebCore::HTMLTableRowElement::insertCell):
        (WebCore::HTMLTableRowElement::deleteCell):
        * html/HTMLTableSectionElement.cpp:
        (WebCore::HTMLTableSectionElement::insertRow):
        (WebCore::HTMLTableSectionElement::deleteRow):

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@21698 268f45cc-cd09-0410-ab3c-d52691b4dbfc

Land optgroup DTD test.

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@21697 268f45cc-cd09-0410-ab3c-d52691b4dbfc

    <optgroup> should allow <script> and text nodes inside it, just like
        <select> does.

        Reviewed by aroben

        fast/forms/stuff-on-my-optgroup.html

        * html/HTMLOptGroupElement.cpp:
        (WebCore::HTMLOptGroupElement::checkDTD):
        * html/HTMLSelectElement.cpp:
        (WebCore::HTMLSelectElement::checkDTD):

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@21696 268f45cc-cd09-0410-ab3c-d52691b4dbfc

Add gigantic z-index test.

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@21695 268f45cc-cd09-0410-ab3c-d52691b4dbfc

    Framesets should allow whitespace text nodes as children.

        Reviewed by aroben

        * html/HTMLFrameSetElement.cpp:
        (WebCore::HTMLFrameSetElement::checkDTD):

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@21694 268f45cc-cd09-0410-ab3c-d52691b4dbfc

    Fix the Qt build after r21685.

        * platform/qt/CursorQt.cpp:
        (WebCore::notAllowedCursor):
        (WebCore::zoomInCursor):
        (WebCore::zoomOutCursor):

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@21693 268f45cc-cd09-0410-ab3c-d52691b4dbfc

    Reviewed by Adam.

        Fix the gdk build following changes in r21685.

        * platform/gdk/CursorGdk.cpp:
        (WebCore::zoomInCursor):
        (WebCore::zoomOutCursor):

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@21692 268f45cc-cd09-0410-ab3c-d52691b4dbfc

    Fix for <rdar://problem/5222611> REGRESSION: Paint ordering problems at
        http://buymeasoda.com/dev/issues/image_onload/image_onload.html

        Clamp z-index so that values that exceed maxint (or that are below minint)
        are clamped to those values.

        Reviewed by darin

        * css/cssstyleselector.cpp:
        (WebCore::CSSStyleSelector::applyProperty):

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@21691 268f45cc-cd09-0410-ab3c-d52691b4dbfc

LayoutTests:

        Reviewed by David Hyatt.

        - tests for http://bugs.webkit.org/show_bug.cgi?id=13563
          REGRESSION: Crash loading message in Yahoo! Mail

        * fast/css/stale-style-selector-crash-1-expected.txt: Added.
        * fast/css/stale-style-selector-crash-1.html: Added.
        * fast/css/stale-style-selector-crash-2-expected.txt: Added.
        * fast/css/stale-style-selector-crash-2.html: Added.

WebCore:

        Reviewed by David Hyatt.

        - fix http://bugs.webkit.org/show_bug.cgi?id=13563
          REGRESSION: Crash loading message in Yahoo! Mail

        Tests: fast/css/stale-style-selector-crash-1.html
               fast/css/stale-style-selector-crash-2.html

        * dom/Document.cpp:
        (WebCore::Document::Document): Initialize the m_didCalculateStyleSelector
        flag to 'false'.
        (WebCore::Document::updateStyleSelector): Do not bail out if we have ever
        calculated a non-trivial style selector, even if at the moment we are
        pending style sheets. We could have calculated a non-trivial selector
        already either because at some point there were no pending style sheets
        (so the currently pending ones were added dynamically) or because we were
        forced to do a layout ignoring pending style sheets. Either way, once
        there is a style selector, we need to keep it up to date, otherwise we can
        crash under recalcStyle() during updateRendering() or simply not recalculate
        style correctly for dynamic changes.
        (WebCore::Document::recalcStyleSelector): Set m_didCalculateStyleSelector
        to 'true' when creating a new style selector.
        * dom/Document.h:

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@21690 268f45cc-cd09-0410-ab3c-d52691b4dbfc

    Reviewed by Adam.

        <rdar://problem/5224749> Show a zoom/unzoom cursor for resizable image documents

        * WebCore.xcodeproj/project.pbxproj:
        Install the zoom cursors.

        * loader/ImageDocument.cpp:
        (WebCore::ImageDocument::resizeImageToFit):
        Set the cursor to the zoom in cursor.

        (WebCore::ImageDocument::restoreImageSize):
        If the image fits, reset the cursor. Otherwise, set it to the zoom in cursor.

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@21689 268f45cc-cd09-0410-ab3c-d52691b4dbfc

    Reviewed by Geoff.

        <rdar://problem/3663808> Resize large images to fit in the browser window

        Add new WebPreferences SPI.

        * WebView/WebPreferenceKeysPrivate.h:
        * WebView/WebPreferences.m:
        (+[WebPreferences initialize]):
        (-[WebPreferences enableAutomaticImageResizing]):
        (-[WebPreferences setEnableAutomaticImageResizing:]):
        * WebView/WebPreferencesPrivate.h:
        * WebView/WebView.mm:
        (-[WebView _updateWebCoreSettingsFromPreferences:]):

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@21688 268f45cc-cd09-0410-ab3c-d52691b4dbfc

LayoutTests:

        Reviewed by Hyatt.

        - updated the many tests with an extra newline or two at the end
          because of the bug where plain-text serialization will consider
          nodes that are not rendered

WebCore:

        Reviewed by Hyatt.

        - fix problems where unrendered nodes were affecting on plain text serialization

        * editing/TextIterator.cpp:
        (WebCore::TextIterator::advance): Don't call handleXXX functions or exitNode for
        nodes without renderers.
        (WebCore::shouldEmitNewlineAfterNode): Only consider rendered nodes when deciding
        if this is the last node in the document.

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@21687 268f45cc-cd09-0410-ab3c-d52691b4dbfc

    Reviewed by Geoff.

        <rdar://problem/3663808> Resize large images to fit in the browser window

        * WebCore.exp:
        Add new settings method.

        * loader/ImageDocument.cpp:
        (WebCore::ImageEventListener::ImageEventListener):
        New class that handles resize events and click events and forwards them to the image document.

        (WebCore::ImageTokenizer::ImageTokenizer):
        (WebCore::ImageTokenizer::writeRawData):
        (WebCore::ImageTokenizer::finish):
        (WebCore::ImageDocument::ImageDocument):
        (WebCore::ImageDocument::createDocumentStructure):
        (WebCore::ImageDocument::cachedImage):
        Let the ImageDocument class keep track of its document structure.

        (WebCore::ImageDocument::scale):
        Returns the scale that should be used when resizing the image.

        (WebCore::ImageDocument::resizeImage):
        Update the image size.

        (WebCore::ImageDocument::imageClicked):
        Toggle between resized and not resized. When restoring the size, scroll the image so that the area under
        the mouse stays the same.

        (WebCore::ImageDocument::imageChanged):
        When the image size is known, resize the image if needed.

        (WebCore::ImageDocument::restoreImageSize):
        Restore the image size.

        (WebCore::ImageDocument::imageNeedsResizing):
        Return whether the image is too big for its window or not.

        (WebCore::ImageDocument::windowSizeChanged):
        Called when the window's size changes. Determine if the window fits or not and resize it if it doesn't fit.

        (WebCore::ImageEventListener::handleEvent):
        Forward events to the image document.

        * page/Settings.cpp:
        (WebCore::Settings::Settings):
        (WebCore::Settings::setEnableAutomaticImageResizing):
        * page/Settings.h:
        (WebCore::Settings::enableAutomaticImageResizing):
        Add new setting.

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@21686 268f45cc-cd09-0410-ab3c-d52691b4dbfc

    Reviewed by Darin.

        Add -webkit-zoom-in and -webkit-zoom-out cursors.

        * Resources/zoomInCursor.png: Added.
        * Resources/zoomOutCursor.png: Added.
        * css/CSSComputedStyleDeclaration.cpp:
        (WebCore::CSSComputedStyleDeclaration::getPropertyCSSValue):
        * css/CSSValueKeywords.in:
        * page/EventHandler.cpp:
        (WebCore::selectCursor):
        * platform/Cursor.h:
        * platform/mac/CursorMac.mm:
        (WebCore::zoomInCursor):
        (WebCore::zoomOutCursor):
        * rendering/RenderStyle.h:
        (WebCore::):

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@21685 268f45cc-cd09-0410-ab3c-d52691b4dbfc

    Reviewed by Darin.

        Part one of patch for http://bugs.webkit.org/show_bug.cgi?id=13830
        Auto-generate JS DOM bindings for HTMLDocument and most of the rest
        of HTMLElement

        - Just the HTMLElement part.

        * bindings/js/kjs_html.cpp:
        (KJS::JSHTMLElement::getValueProperty):
        (KJS::JSHTMLElement::putValueProperty):
        * bindings/js/kjs_html.h:
        (KJS::JSHTMLElement::):
        * html/HTMLElement.idl:

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@21683 268f45cc-cd09-0410-ab3c-d52691b4dbfc

LayoutTests:

        Reviewed by Darin.

        Update tests for http://bugs.webkit.org/show_bug.cgi?id=13830
        Auto-generate JS DOM bindings for HTMLDocument and most of
        the rest of HTMLElement

        - Corrects prototype chain for JSHTMLDocument and adds test
          for HTMLFormElement.

        * fast/dom/prototype-chain-expected.txt:
        * fast/dom/prototype-chain.html:

WebCore:

        Reviewed by Darin.

        - rdar://problem/5183523
        - We now check the document's URL to see if it can load a resource in the case of a URL click, instead of checking the referrer, which is blank for local files.

        * loader/FrameLoader.cpp:
        (WebCore::FrameLoader::load):
        (WebCore::FrameLoader::open):
        * platform/PlatformString.h:
        (WebCore::debugPrintString):

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@21682 268f45cc-cd09-0410-ab3c-d52691b4dbfc

LayoutTests:

        Reviewed by Darin.

        Update tests for http://bugs.webkit.org/show_bug.cgi?id=13830
        Auto-generate JS DOM bindings for HTMLDocument and most of
        the rest of HTMLElement

        - Corrects prototype chain for JSHTMLDocument and adds test
          for HTMLFormElement.

        * fast/dom/prototype-chain-expected.txt:
        * fast/dom/prototype-chain.html:

WebCore:

        Reviewed by Darin.

        Part two of patch for http://bugs.webkit.org/show_bug.cgi?id=13830
        Auto-generate JS DOM bindings for HTMLDocument and most of the rest
        of HTMLElement

        - Just the HTMLDocument part.

        * WebCore.pro:
        * WebCore.xcodeproj/project.pbxproj:
        * bindings/js/JSHTMLDocumentCustom.cpp: Added.
        (WebCore::JSHTMLDocument::canGetItemsForName):
        (WebCore::JSHTMLDocument::nameGetter):
        (WebCore::JSHTMLDocument::all):
        (WebCore::JSHTMLDocument::setAll):
        (WebCore::JSHTMLDocument::location):
        (WebCore::JSHTMLDocument::setLocation):
        (WebCore::JSHTMLDocument::open):
        (WebCore::writeHelper):
        (WebCore::JSHTMLDocument::write):
        (WebCore::JSHTMLDocument::writeln):
        (WebCore::JSHTMLDocument::clear):
        * bindings/js/kjs_dom.cpp:
        (KJS::toJS):
        * bindings/js/kjs_dom.h:
        * bindings/js/kjs_html.cpp:
        * bindings/js/kjs_html.h:
        * bindings/objc/DOMPrivate.h:
        * bindings/scripts/CodeGeneratorJS.pm: Add [Deletable] property
        for Document.all and fix HasOverridingNameGetter to allow correct
        prototype chain
        * dom/Document.cpp:
        (WebCore::Document::plugins): adds alias to embeds() for bindings
        * dom/Document.h:
        * html/HTMLDocument.cpp:
        (WebCore::HTMLDocument::width):
        (WebCore::HTMLDocument::height):
        (WebCore::HTMLDocument::dir):
        (WebCore::HTMLDocument::setDir):
        (WebCore::HTMLDocument::designMode):
        (WebCore::HTMLDocument::setDesignMode):
        (WebCore::HTMLDocument::bgColor):
        (WebCore::HTMLDocument::setBgColor):
        (WebCore::HTMLDocument::fgColor):
        (WebCore::HTMLDocument::setFgColor):
        (WebCore::HTMLDocument::alinkColor):
        (WebCore::HTMLDocument::setAlinkColor):
        (WebCore::HTMLDocument::linkColor):
        (WebCore::HTMLDocument::setLinkColor):
        (WebCore::HTMLDocument::vlinkColor):
        (WebCore::HTMLDocument::setVlinkColor):
        (WebCore::HTMLDocument::captureEvents):
        (WebCore::HTMLDocument::releaseEvents):
        * html/HTMLDocument.h:
        * html/HTMLDocument.idl:

WebKit:

        Reviewed by Darin.

        Patch for http://bugs.webkit.org/show_bug.cgi?id=13830
        Auto-generate JS DOM bindings for HTMLDocument and most of the rest
        of HTMLElement

        * MigrateHeaders.make: add DOMHTMLDocumentPrivate.h
        * WebKit.xcodeproj/project.pbxproj:

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@21681 268f45cc-cd09-0410-ab3c-d52691b4dbfc

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@21680 268f45cc-cd09-0410-ab3c-d52691b4dbfc

    Fix for <rdar://problem/5221838> REGRESSION (r21581): no content in idisk
        window at mac.com.

        Back out the change to make self-closed <script/> into a Dashboard quirk
        only.

        Reviewed by aroben

        * html/HTMLTokenizer.cpp:
        (WebCore::HTMLTokenizer::parseTag):

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@21679 268f45cc-cd09-0410-ab3c-d52691b4dbfc

    Reviewed by Geoff.

        Fix for <rdar://problem/5223782> REGRESSION: Can't drag and drop a standalone image

        The main resource for a standalone image webarchive has the same mimetype as the
        underlying image.

        * Misc/WebNSPasteboardExtras.mm:
        (-[NSPasteboard _web_writePromisedRTFDFromArchive:containsImage:]):

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@21678 268f45cc-cd09-0410-ab3c-d52691b4dbfc

    Reviewed by.

        - Fixed build breakage.

        * fast/dom/open-and-close-by-DOM-expected.txt: Added.
        * fast/dom/open-and-close-by-DOM.html: Added.

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@21671 268f45cc-cd09-0410-ab3c-d52691b4dbfc

<rdar://problem/5078453> AXNext/PrevLineEndTextMarkerForTextMarker returns kAXErrorNoValue for attachment range

        Floating objects, such as aligned images, are not included as part of any line.  So when the given
        text marker is on the floating object, the returned line edge cannot be found and asserts are fired.
        In addition, this paints an inconsistent text layout (in the accessibility sense) of where the floating
        object resides.  Character/word methods report floating object at the beginning of the text line(s).  Yet
        line methods never present floating objects anywhere.
        To fix this, the ax line methods will now do more checking to ensure floating object nodes are included
        when determining the line range/position. That way, assistive apps won't get stuck using the line methods
        to read line-by-line

        * bridge/mac/WebCoreAXObject.mm:
        (updateAXLineStartForVisiblePosition):
        Added a helper method to adjust line start position to account for floating objects
        (-[WebCoreAXObject doAXLeftLineTextMarkerRangeForTextMarker:]):
        (-[WebCoreAXObject doAXRightLineTextMarkerRangeForTextMarker:]):
        (-[WebCoreAXObject doAXNextLineEndTextMarkerForTextMarker:]):
        (-[WebCoreAXObject doAXPreviousLineStartTextMarkerForTextMarker:]):
        Fixed up line routines to include floating object nodes in line position calculation.
        startOfLine/endOLine may return null for position next to a floating position.  So now there's extra checks to prevent
        returning null line position/ranges back to AX.

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@21670 268f45cc-cd09-0410-ab3c-d52691b4dbfc

    Reviewed by.

        - Removing failing tests until I've fixed them.

        * fast/dom/open-and-close-by-DOM-expected.txt: Removed.
        * fast/dom/open-and-close-by-DOM.html: Removed.

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@21669 268f45cc-cd09-0410-ab3c-d52691b4dbfc

Added support for per-QWebPage network interface handlers, clean up the
http and file loading and fixed a bug in the HTTP redirect handling.

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@21668 268f45cc-cd09-0410-ab3c-d52691b4dbfc

    Reviewed by Dave Hyatt.

        http://bugs.webkit.org/show_bug.cgi?id=13174
        line-height in font shorthand does not override a previously stated line-height property

        Make sure line-height is calculated against definite font-size and
        uses the last set line-height, ie. directly or through font shorthand.

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@21667 268f45cc-cd09-0410-ab3c-d52691b4dbfc

    Reviewed by Zack

        Don't do HTTP downloads in a second thread. Simplifies
        the code significantly and fixes crashes on some
        Web pages.

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@21666 268f45cc-cd09-0410-ab3c-d52691b4dbfc

    Reviewed by Zack and Valgrind

        Initialize variable.

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@21665 268f45cc-cd09-0410-ab3c-d52691b4dbfc

    Reviewed by Darin.

        http://bugs.webkit.org/show_bug.cgi?id=13784
        REGRESSION (r13744-13750): Crash with empty gradient when drawing to canvas

        Fix crash by testing for zero stops, and returning transparent black
        in this case.

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@21664 268f45cc-cd09-0410-ab3c-d52691b4dbfc

    Reviewed by Darin.

        http://bugs.webkit.org/show_bug.cgi?id=13801
        Crash when loading nonexisting symbol

        Check for referenced element and when not found just return.

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@21663 268f45cc-cd09-0410-ab3c-d52691b4dbfc

Fix Host: line in HTTP headers and resolving of relative URLs
when redirecting and clean up qHash forward declaration a bit.

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@21662 268f45cc-cd09-0410-ab3c-d52691b4dbfc

Fix signal/slot connection for load progress.

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@21661 268f45cc-cd09-0410-ab3c-d52691b4dbfc

    Rubber stamped by Adam.

        Fix license.

        * bindings/js/JSHTMLAnchorElementCustom.cpp:

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@21656 268f45cc-cd09-0410-ab3c-d52691b4dbfc

LayoutTests:

        Reviewed by Adam.

        Update tests for http://bugs.webkit.org/show_bug.cgi?id=13833
        Add ObjC DOM binding for HTMLMarqeeElement

        * fast/dom/wrapper-classes-expected.txt:
        * fast/dom/wrapper-classes.html: HTMLMarqueeElement now is a
        DOMHTMLMarqueeElement

WebCore:

        Reviewed by Adam.

        Patch for http://bugs.webkit.org/show_bug.cgi?id=13833
        Add ObjC DOM binding for HTMLMarqeeElement

        - Also adds missing DOMHTMLFramePrivate.

        * DerivedSources.make:
        * WebCore.xcodeproj/project.pbxproj:
        * bindings/objc/DOM.mm:
        (WebCore::createElementClassMap):
        * bindings/objc/DOMHTML.h:
        * bindings/objc/DOMInternal.h:
        * bindings/objc/DOMPrivate.h:
        * bindings/objc/PublicDOMInterfaces.h:

WebKit:

        Reviewed by Adam.

        Patch for http://bugs.webkit.org/show_bug.cgi?id=13833
        Add ObjC DOM binding for HTMLMarqeeElement

        - Also adds missing DOMHTMLFramePrivate.

        * MigrateHeaders.make:

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@21655 268f45cc-cd09-0410-ab3c-d52691b4dbfc

LayoutTests:

        Reviewed by darin

        http://bugs.webkit.org/show_bug.cgi?id=13804
        REGRESSION(r21611): Several new layout test pixel failures (misspelling markers)

        * editing/selection/13804-expected.checksum: Added.
        * editing/selection/13804-expected.png: Added.
        * editing/selection/13804-expected.txt: Added.
        * editing/selection/13804.html: Added.
        These were missing:
        * editing/selection/5076323-1-expected.png: Added.
        * editing/selection/5076323-2-expected.png: Added.
        * editing/selection/5076323-3-expected.png: Added.

WebCore:

        Reviewed by darin, who found the fix independently.

        http://bugs.webkit.org/show_bug.cgi?id=13804
        REGRESSION(r21611): Several new layout test pixel failures (misspelling markers)

        r21611 exposed a bug in the way removeMarkers computes
        the end of the range to remove markers from.  It also
        introduced a bug: removeMarkers expects a startOffset
        and a length, not a startOffset and an endOffset (added
        a layout test).

        * dom/Document.cpp:
        (WebCore::Document::removeMarkers): The other removeMarkers
        expects a startOffset and a length, not a startOffset and
        an endOffset.
        (WebCore::Document::removeMarkers): Fixed the endOffset
        from length and startOffset calculation.

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@21654 268f45cc-cd09-0410-ab3c-d52691b4dbfc

Add layout test for better background dumping.

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@21653 268f45cc-cd09-0410-ab3c-d52691b4dbfc

    Fix for bug 13802, background colors can't be reset to default
        color.  Fix the value cssText method to do the right thing for background
        and background-position values.

        Reviewed by beth

        fast/dom/background-shorthand-csstext.html

        * css/CSSInitialValue.h:
        (WebCore::CSSInitialValue:::m_implicit):
        (WebCore::CSSInitialValue::isImplicitInitialValue):
        * css/CSSMutableStyleDeclaration.cpp:
        (WebCore::CSSMutableStyleDeclaration::getPropertyValue):
        (WebCore::CSSMutableStyleDeclaration::getLayeredShorthandValue):
        * css/CSSMutableStyleDeclaration.h:
        * css/CSSValue.h:
        (WebCore::CSSValue::isImplicitInitialValue):
        * css/cssparser.cpp:
        (WebCore::CSSParser::parseValue):
        (WebCore::CSSParser::parseBackgroundShorthand):
        (WebCore::CSSParser::parseShorthand):

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@21652 268f45cc-cd09-0410-ab3c-d52691b4dbfc

LayoutTests:

        Reviewed by Geoff.

        - test for <rdar://problem/5215830> REGRESSION: ebay.com layout is wrong

        * fast/dom/iframe-document.html: Updated test to expect no document property.
        * fast/dom/iframe-document-expected.txt: Updated.

        * fast/forms/focus2.html: Changed test to use ownerDocument instead of document.

WebCore:

        Reviewed by Geoff.

        - fix <rdar://problem/5215830> REGRESSION: ebay.com layout is wrong

        The code on ebay was looking for the "document" property on a iframe.
        We changed that to be the ownerDocument rather than the contentDocument,
        which was not what ebay was expecting. The best fix seems to be removing
        the document property altogether.

        Test: fast/dom/iframe-document.html

        * bindings/js/kjs_html.h: Remove ElementDocument.
        * bindings/js/kjs_html.cpp: (KJS::JSHTMLElement::getValueProperty): Ditto.

WebKit:

        Reviewed by Geoff.

        * WebInspector/webInspector/treeoutline.js: Use ownerDocument instead of non-standard
        document property.

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@21651 268f45cc-cd09-0410-ab3c-d52691b4dbfc

    Reviewed by Darin.

        A little cleanup from my last checkin.

        * page/Chrome.h: Formatting change.
        * page/mac/ChromeMac.mm: Fixed copyright.

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@21650 268f45cc-cd09-0410-ab3c-d52691b4dbfc

LayoutTests:

        Reviewed by Darin.

        Test for http://bugs.webkit.org/show_bug.cgi?id=13796
        Crash in [NSInputContext currentInputContext] when you click on this map

        * fast/frames/frame-display-none-focus-expected.txt: Added.
        * fast/frames/frame-display-none-focus.html: Added.
        * fast/frames/resources/iframe-focus.html: Added.

WebCore:

        Reviewed by Darin.

        Fix for http://bugs.webkit.org/show_bug.cgi?id=13796
        Crash in [NSInputContext currentInputContext] when you click on this map

        This is another case of <rdar://problem/5171145> Safari crashed closing tab in NSInputContext updateInputContexts

        Test: fast/frames/frame-display-none-focus.html

        * WebCore.xcodeproj/project.pbxproj: Added ChromeMac.mm
        * page/Chrome.h:
        * page/mac/ChromeMac.mm: Added.
        (WebCore::Chrome::focusNSView): Moved code from Widget::setFocus so it can be used whenever we need to make a view the first responder.
        * page/mac/EventHandlerMac.mm: (WebCore::EventHandler::focusDocumentView): Calls focusNSView.
        * platform/mac/WidgetMac.mm: (WebCore::Widget::setFocus): Calls focusNSView.

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@21649 268f45cc-cd09-0410-ab3c-d52691b4dbfc

LayoutTests:

        Reviewed by darin

        <rdar://problem/4875189> List is deleted when replacing contents with Chinese/Japanese characters

        Moved from unsupported-content because we've supported editing lists
        for a while now:
        * editing/deleting/4875189-expected.checksum: Added.
        * editing/deleting/4875189-expected.png: Added.
        * editing/deleting/4875189-expected.txt: Added.
        * editing/deleting/4875189.html: Added.
        * editing/unsupported-content/list-delete-002-expected.checksum: Removed.
        * editing/unsupported-content/list-delete-002-expected.png: Removed.
        * editing/unsupported-content/list-delete-002-expected.txt: Removed.
        * editing/unsupported-content/list-delete-002.html: Removed.

        Reflects new behavior:
        * editing/deleting/delete-select-all-003-expected.checksum:
        * editing/deleting/delete-select-all-003-expected.png:
        * editing/deleting/delete-select-all-003-expected.txt:

        Ditto and also removed a FIXME:
        * editing/deleting/list-item-1-expected.checksum:
        * editing/deleting/list-item-1-expected.png:
        * editing/deleting/list-item-1-expected.txt:
        * editing/deleting/list-item-1.html:

WebCore:

        Reviewed by darin

        <rdar://problem/4875189>
        List is deleted when replacing contents with Chinese/Japanese characters

        * editing/htmlediting.cpp:
        (WebCore::isSpecialElement): Lists are no longer special.
        They can be removed by removing their content and then
        then hitting delete inside of the empty list item that's
        left over. Even when that list item is the first thing
        in the editable region.

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@21648 268f45cc-cd09-0410-ab3c-d52691b4dbfc

    Reviewed by Darin.

        Adding some asserts to help detect other cases of <rdar://problem/5171145>

        * WebCoreSupport/WebFrameBridge.mm: (-[WebFrameBridge makeFirstResponder:]):

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@21647 268f45cc-cd09-0410-ab3c-d52691b4dbfc

    Reviewed by Tim Hatcher.

        - fix <rdar://problem/5206089> REGRESSION: hovering over amazon.com "product categories"
          tab makes page content disappear

        The contentWindow property was doing a cross-frame security check, but it shouldn't.
        Window objects are responsible for protecting themselves from cross-frame activity.
        Because contentWindow returned undefined, we then ended up setting visibility on the
        body of the main frame to "hidden".

        No layout test yet. When we make cross-domain tests, we should include this one.

        * html/HTMLFrameElement.idl: Removed CheckFrameSecurity attribute from contentWindow.
        * html/HTMLIFrameElement.idl: Ditto.

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@21646 268f45cc-cd09-0410-ab3c-d52691b4dbfc

    Reviewed by.

        - Forgot to checkin for fix for rdar://problem/4981886

        * fast/dom/open-and-close-by-DOM-expected.txt: Added.
        * fast/dom/open-and-close-by-DOM.html: Added.
        * fast/dom/resources/close.html: Added.
        * fast/dom/resources/middle.html: Added.
        * http/tests/security/local-image-from-remote.html:

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@21645 268f45cc-cd09-0410-ab3c-d52691b4dbfc

LayoutTests:

        Reviewed by oliver

        <rdar://problem/5213963>
        REGRESSION(r21467): Active selection remains in text field after clicking on a button

        Demonstrates bug:
        * editing/selection/5213963-expected.checksum: Added.
        * editing/selection/5213963-expected.png: Added.
        * editing/selection/5213963-expected.txt: Added.
        * editing/selection/5213963.html: Added.
        We now clear the selection on mouse down (but not before
        the mousedown event is fired):
        * fast/forms/focus-selection-input-expected.txt:
        * fast/forms/focus-selection-textarea-expected.txt:

WebCore:

        Reviewed by oliver

        <rdar://problem/5213963>
        REGRESSION(r21467): Active selection remains in text field after clicking on a button

        * page/EventHandler.cpp:
        (WebCore::EventHandler::dispatchMouseEvent): Call
        FocusController::setFocusedNode, because Document::setFocusedNode
        no longer clears the selection.
        Begin passing the new focused frame to
        FocusController::setFocusedNode, because when the
        new focus node is null, the selection should only be
        cleared if the focused frame isn't changing.
        (WebCore::Element::focus): Begin passing the new focused
        frame.
        (WebCore::Element::blur): Ditto.
        * html/HTMLInputElement.cpp:
        (WebCore::HTMLInputElement::focus): Ditto.
        * html/HTMLTextAreaElement.cpp:
        (WebCore::HTMLTextAreaElement::focus): Ditto.
        * page/Frame.cpp:
        (WebCore::Frame::setFocusedNodeIfNeeded): Ditto.
        * page/FocusController.cpp:
        (WebCore::clearSelectionIfNeeded): Take in the new
        focused frame.  If it's not changing, don't clear the
        selection.
        (WebCore::FocusController::setFocusedNode): Take
        in the new focused frame.
        * page/FocusController.h:

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@21642 268f45cc-cd09-0410-ab3c-d52691b4dbfc

    Reviewed by Kevin (Sarge)

        <rdar://problem/5219885> - Crash after closing a inline popup ad at http://news.yahoo.com/

        This regressed in http://trac.webkit.org/projects/webkit/changeset/21618

        * WebView/WebFrame.mm:
        (-[WebFrame dataSource]): Null check the frameloader

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@21641 268f45cc-cd09-0410-ab3c-d52691b4dbfc

back this out for zack

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@21640 268f45cc-cd09-0410-ab3c-d52691b4dbfc