Merge 92143 - .: REGRESSION (r39725?): Resources removed from document can not be freed until the...

Source/WebCore/ChangeLog

Index: Source/WebCore/ChangeLog
===================================================================
--- Source/WebCore/ChangeLog	(revision 92202)
+++ Source/WebCore/ChangeLog	(working copy)
@@ -1,3 +1,3168 @@
+2011-08-01  Scott Graham  <scottmg@chromium.org>
+
+        REGRESSION (r39725?): Resources removed from document can not be freed
+        until the document is deleted
+        https://bugs.webkit.org/show_bug.cgi?id=61006
+
+        Reviewed by Antti Koivisto.
+
+        Upon completing a load start a Timer to iterate through
+        CachedResourceLoader's m_documentResources map to check for any items
+        that have only one reference (thus being the reference in the map
+        itself). The map should really be weak, but because the
+        CachedResourceHandle achieves bookkeeping work in addition to
+        reference counting, this is a simpler and more localized way to free
+        the used memory while maintaining the other behaviour (when
+        CachedResource is used as proxy).
+
+        With this patch the testcase at
+        https://bugs.webkit.org/attachment.cgi?id=93850 should no longer
+        consume 400MB of ram on load. Test added for crash discovered in
+        previous revision, but no tests for memory usage.
+
+        Test: http/tests/inspector/network/disabled-cache-crash.html
+
+        * WebCore.exp.in:
+        * loader/cache/CachedResource.h:
+        (WebCore::CachedResource::hasOneHandle):
+        * loader/cache/CachedResourceLoader.cpp:
+        (WebCore::CachedResourceLoader::CachedResourceLoader):
+        (WebCore::CachedResourceLoader::loadDone):
+        (WebCore::CachedResourceLoader::garbageCollectDocumentResourcesTimerFired):
+        * loader/cache/CachedResourceLoader.h:
+        * testing/Internals.cpp:
+        (WebCore::Internals::disableMemoryCache):
+        * testing/Internals.h:
+        * testing/Internals.idl:
+
+2011-08-01  Jochen Eisinger  <jochen@chromium.org>
+
+        Never override the policy URL on form submissions.
+        https://bugs.webkit.org/show_bug.cgi?id=61809
+
+        Reviewed by Adam Barth.
+
+        Tests: http/tests/security/cookies/third-party-cookie-blocking-main-frame.html
+               http/tests/security/cookies/third-party-cookie-blocking-user-action.html
+               http/tests/security/cookies/third-party-cookie-blocking.html
+
+        * loader/FrameLoader.cpp:
+        (WebCore::FrameLoader::loadURL):
+        (WebCore::FrameLoader::addExtraFieldsToSubresourceRequest):
+        (WebCore::FrameLoader::addExtraFieldsToMainResourceRequest):
+        (WebCore::FrameLoader::addExtraFieldsToRequest):
+        (WebCore::FrameLoader::loadPostRequest):
+        (WebCore::FrameLoader::loadDifferentDocumentItem):
+        * loader/FrameLoader.h:
+
+
+2011-08-01  Ryosuke Niwa  <rniwa@webkit.org>
+
+        Update comment added in r92139 per Darin's suggestion.
+
+        * css/CSSStyleSelector.cpp:
+        (WebCore::CSSStyleSelector::styleForElement):
+
+2011-08-01  Ryosuke Niwa  <rniwa@webkit.org>
+
+        Search field in designMode causes a crash
+        https://bugs.webkit.org/show_bug.cgi?id=65362
+
+        Reviewed by Dimitri Glazkov.
+
+        The crashed was caused by editing code inadvertently deleting search and cancel buttons in the design mode.
+        Fixed the bug by avoid inheriting user-modify property from the shadow host.
+
+        Test: editing/input/search-field-crash-in-designmode.html
+
+        * css/CSSStyleSelector.cpp:
+        (WebCore::isAtShadowBoundary): Moved.
+        (WebCore::CSSStyleSelector::styleForElement): Overrides -webkit-user-modify by the initial value after m_style
+        inherited the values from m_parentStyle but before applying matched rules.
+        * dom/Node.cpp:
+        (WebCore::Node::rendererIsEditable): Ignore page's editability inside a shadow DOM.
+
+2011-08-01  Marco Peereboom  <marco@peereboom.us>
+
+        [Soup] Set default max-conns to a more sane default value and fix comment 
+        https://bugs.webkit.org/show_bug.cgi?id=65335
+
+        Reviewed by Martin Robinson.
+
+        Rigged the xxxterm web browser and validated that the default values were set properly.
+
+        * platform/network/soup/ResourceHandleSoup.cpp:
+        (WebCore::ResourceHandle::defaultSession):
+
+2011-07-28  Abhishek Arya  <inferno@chromium.org>
+
+        Regression(82144): Crash in TrailingObjects::updateMidpointsForTrailingBoxes
+        https://bugs.webkit.org/show_bug.cgi?id=65137
+
+        Fix the looping condition to prevent trailingSpaceMidpoint from becoming negative.
+
+        Reviewed by Dave Hyatt.
+
+        Test: fast/block/update-midpoints-for-trailing-boxes-crash.html
+
+        * rendering/RenderBlockLineLayout.cpp:
+        (WebCore::TrailingObjects::updateMidpointsForTrailingBoxes):
+
+2011-08-01  Benjamin Poulain  <benjamin@webkit.org>
+
+        [Qt] OpenGLShims does not build on ARM
+        https://bugs.webkit.org/show_bug.cgi?id=65465
+
+        Reviewed by Noam Rosenthal.
+
+        Fix the build with OpenGL ES 2:
+        -lookupOpenGLFunctionAddress() was defined but not used for OpenGL ES.
+        -glBlitFramebuffer() and glRenderbufferStorageMultisample() are not part of the specification.
+        When those are available as platform extension, the extension has been added.
+        -GLchar is not defined on some platform. The patch adds the same typedef as the official definition
+        to avoid conflicts.
+
+        * platform/graphics/cairo/OpenGLShims.cpp:
+        (lookupOpenGLFunctionAddress):
+        (WebCore::initializeOpenGLShims):
+        * platform/graphics/cairo/OpenGLShims.h:
+
+2011-08-01  Yury Semikhatsky  <yurys@chromium.org>
+
+        Unreviewed. Trivial fix for inspector/debugger/debugger-completions-on-call-frame.html after r92122.
+
+        * inspector/front-end/ConsoleView.js:
+
+2011-08-01  Hayato Ito  <hayato@chromium.org>
+
+        Add support for getting an element in shadow root by its id into a window.internals object.
+        https://bugs.webkit.org/show_bug.cgi?id=64587
+
+        Reviewed by Hajime Morita.
+
+        Test: fast/dom/shadow/get-element-by-id-in-shadow-root.html
+
+        * WebCore.exp.in:
+        * testing/Internals.cpp:
+        (WebCore::Internals::getElementByIdInShadowRoot):
+        * testing/Internals.h:
+        * testing/Internals.idl:
+
+2011-07-15  Hayato Ito  <hayato@chromium.org>
+
+        Add support for retrieving an element in TreeScope by id to window.internals object.
+        https://bugs.webkit.org/show_bug.cgi?id=64587
+
+        Reviewed by Hajime Morita.
+
+        Test: fast/dom/shadow/get-element-by-id-in-shadow.html
+
+        * WebCore.exp.in:
+        * testing/Internals.cpp:
+        (WebCore::Internals::getElementByIdInTreeScope):
+        * testing/Internals.h:
+        * testing/Internals.idl:
+
+2011-08-01  Yury Semikhatsky  <yurys@chromium.org>
+
+        Web Inspector: typing an expression in an iframe leads to multiple "Unsafe JavaScript attempt to access frame..." errors
+        https://bugs.webkit.org/show_bug.cgi?id=65457
+
+        Console completions are now done using evaluation which returns a JSON object with all property names rather than a remote
+        object. Also Runtime.evaluate and Runtime.callFunctionOn commands were extended with an optional parameter that allows to
+        get result as JSON value.
+
+        Reviewed by Pavel Feldman.
+
+        Test: http/tests/inspector/console-cd-completions.html
+
+        * inspector/InjectedScript.cpp:
+        (WebCore::InjectedScript::evaluate):
+        (WebCore::InjectedScript::callFunctionOn):
+        * inspector/InjectedScript.h:
+        * inspector/InjectedScriptSource.js:
+        (.):
+        ():
+        * inspector/Inspector.json:
+        * inspector/InspectorRuntimeAgent.cpp:
+        (WebCore::asBool):
+        (WebCore::InspectorRuntimeAgent::evaluate):
+        (WebCore::InspectorRuntimeAgent::callFunctionOn):
+        * inspector/InspectorRuntimeAgent.h:
+        * inspector/front-end/ConsoleView.js:
+        (WebInspector.ConsoleView.prototype._completions.evaluated.getCompletions):
+        (WebInspector.ConsoleView.prototype._completions.evaluated):
+        (WebInspector.ConsoleView.prototype._completions.receivedPropertySet):
+        (WebInspector.ConsoleView.prototype._completions):
+        (WebInspector.ConsoleView.prototype.evalInInspectedWindow):
+        * inspector/front-end/RemoteObject.js:
+        (WebInspector.RemoteObject):
+        (WebInspector.RemoteObject.prototype.callFunction):
+        (WebInspector.RemoteObject.prototype.callFunctionJSON):
+        * inspector/front-end/WatchExpressionsSidebarPane.js:
+        (WebInspector.WatchExpressionsSection.prototype.update):
+
+2011-08-01  Mihnea Ovidenie  <mihnea@adobe.com>
+
+        BORDER attribute with the object tag, using percentage values not working.
+        https://bugs.webkit.org/show_bug.cgi?id=65176
+
+        Reviewed by Hajime Morita.
+
+        When border presentational attribute for object element has % in it, it should be parsed using HTML parser rules.
+
+        Test: fast/borders/border-width-percent.html
+
+        * html/HTMLElement.cpp:
+        (WebCore::HTMLElement::parseBorderWidthAttribute):
+        * html/HTMLElement.h:
+        * html/HTMLImageElement.cpp:
+        * html/HTMLObjectElement.cpp:
+        (WebCore::HTMLObjectElement::parseMappedAttribute):
+
+2011-08-01  Yuta Kitamura  <yutak@chromium.org>
+
+        WebSocket: Receive URL and subprotocol in WebSocketChannel::connect()
+        https://bugs.webkit.org/show_bug.cgi?id=65367
+
+        Reviewed by Kent Tamura.
+
+        To implement multiple subprotocols support (bug 65247), WebSocket::connect() will need to validate
+        the value of subprotocols after constructing WebSocketChannel, because the result depends on which
+        WebSocket protocol is used, which is obtained from WebSocketChannel::useHixie76Protocol(). This
+        means the subprotocol value will not be available at the time of WebSocketChannel construction.
+
+        This change moves URL and subprotocol arguments in WebSocketChannel constructor to
+        WebSocketChannel::connect(), which allows WebSocket::connect() function to check the subprotocol
+        value before the actual connection is established.
+
+        Relocating URL argument is technically not necessary, but seemed legitimate in terms of functional
+        correspondence between WebSocket and WebSocketChannel (constructor versus connect()).
+
+        No change in behavior, thus no new tests.
+
+        * websockets/ThreadableWebSocketChannel.cpp:
+        Remove "url" and "protocol" arguments from constructor and add them in connect().
+        (WebCore::ThreadableWebSocketChannel::create):
+        * websockets/ThreadableWebSocketChannel.h:
+        * websockets/WebSocket.cpp:
+        (WebCore::WebSocket::connect):
+        * websockets/WebSocketChannel.cpp: Same as ThreadableWebSocketChannel.
+        (WebCore::WebSocketChannel::WebSocketChannel):
+        (WebCore::WebSocketChannel::connect):
+        InspectorInstrumentation::didCreateWebSocket() call was moved to connect() because it needs URL.
+        This does not change behavior, because connect() is guaranteed to be called immediately after
+        WebSocketChannel is constructed.
+        * websockets/WebSocketChannel.h:
+        (WebCore::WebSocketChannel::create):
+        * websockets/WorkerThreadableWebSocketChannel.cpp: Same as ThreadableWebSocketChannel.
+        (WebCore::WorkerThreadableWebSocketChannel::WorkerThreadableWebSocketChannel):
+        (WebCore::WorkerThreadableWebSocketChannel::connect):
+        (WebCore::WorkerThreadableWebSocketChannel::Peer::Peer):
+        (WebCore::WorkerThreadableWebSocketChannel::Peer::connect):
+        (WebCore::WorkerThreadableWebSocketChannel::Bridge::mainThreadCreateWebSocketChannel):
+        (WebCore::WorkerThreadableWebSocketChannel::Bridge::Bridge):
+        (WebCore::WorkerThreadableWebSocketChannel::mainThreadConnect):
+        (WebCore::WorkerThreadableWebSocketChannel::Bridge::connect):
+        * websockets/WorkerThreadableWebSocketChannel.h:
+        (WebCore::WorkerThreadableWebSocketChannel::create):
+        (WebCore::WorkerThreadableWebSocketChannel::Peer::create):
+        (WebCore::WorkerThreadableWebSocketChannel::Bridge::create):
+
+2011-08-01  Luke Macpherson   <macpherson@chromium.org>
+
+        Add iterator to CSSValueList
+        https://bugs.webkit.org/show_bug.cgi?id=65297
+
+        Reviewed by Darin Adler.
+
+        No new tests / refactoring only.
+
+        * css/CSSPrimitiveValue.h:
+        (WebCore::CSSPrimitiveValue::isLength):
+        Add shorthand to determine if this primitive value is a length.
+        * css/CSSStyleSelector.cpp:
+        Use CSSValueListIterator throughout.
+        (WebCore::CSSStyleSelector::applyProperty):
+        (WebCore::CSSStyleSelector::applyPageSizeProperty):
+        (WebCore::CSSStyleSelector::createTransformOperations):
+        * css/CSSValueList.cpp:
+        (WebCore::CSSValueList::copy):
+        Use itemWithoutBoundsCheck() instead of item().
+        * css/CSSValueList.h:
+        Add CSSValueListIterator and CSSValueListInspector class definitions.
+        (WebCore::CSSValueList::item)
+        Provide inline definition of item.
+        (WebCore::CSSValueListIterator::CSSValueListIterator):
+        (WebCore::CSSValueListIterator::hasMore):
+        Return true if there are more values to consume, including the current value.
+        (WebCore::CSSValueListIterator::value):
+        Return the value at the current position.
+        (WebCore::CSSValueListIterator::next):
+        Move the iterator forward to the next item.
+        (WebCore::CSSValueListIterator::index):
+        Return the current position in the list.
+        (WebCore::CSSValueListInspector::item):
+        Return the item at a given index.
+        (WebCore::CSSValueListInspector::first):
+        Return the first item in the list.
+        (WebCore::CSSValueListInspector::second):
+        Return the second item in the list.
+        (WebCore::CSSValueListInspector::length):
+        Return the size of the underlying list.
+
+2011-08-01  Pavel Feldman  <pfeldman@google.com>
+
+        Web Inspector: group scripts by folder in the scripts selector.
+        https://bugs.webkit.org/show_bug.cgi?id=65321
+
+        Reviewed by Yury Semikhatsky.
+
+        Test: inspector/debugger/scripts-sorting.html
+
+        * inspector/front-end/ScriptsPanel.js:
+        (WebInspector.ScriptsPanel.prototype._sourceFileAdded.get if):
+        (WebInspector.ScriptsPanel.prototype._addOptionToFilesSelect.insertOrdered.optionCompare):
+        (WebInspector.ScriptsPanel.prototype._addOptionToFilesSelect.insertOrdered):
+        (WebInspector.ScriptsPanel.prototype._addOptionToFilesSelect):
+        (WebInspector.ScriptsPanel.prototype._folderAndDisplayNameForScriptURL):
+        (WebInspector.ScriptsPanel.prototype.reset):
+        (WebInspector.SourceFrameDelegateForScriptsPanel.prototype.suggestedFileName):
+
+2011-07-28  Pavel Feldman  <pfeldman@google.com>
+
+        Web Inspector: [protocol] methods where all parameters are optional should not require empty params object.
+        https://bugs.webkit.org/show_bug.cgi?id=65331
+
+        Reviewed by Yury Semikhatsky.
+
+        * inspector/CodeGeneratorInspector.pm:
+        (generateBackendFunction):
+        (generateArgumentGetters):
+
+2011-08-01  Adam Barth  <abarth@webkit.org>
+
+        application/json MIME type shouldn't cause warnings in <script> tags
+        https://bugs.webkit.org/show_bug.cgi?id=65448
+
+        Reviewed by Pavel Feldman.
+
+        This patch stops the web inspector from logging a ton of spam warnings
+        when a web page uses a JSONP service (which points script tags at
+        application/json resources).
+
+        * inspector/front-end/inspector.js:
+        (WebInspector.reset):
+
+2011-08-01  Yuta Kitamura  <yutak@chromium.org>
+
+        WebSocket: Rename SocketStreamHandleClient member functions
+        https://bugs.webkit.org/show_bug.cgi?id=65374
+
+        Reviewed by Kent Tamura.
+
+        Rename SocketStreamHandleClient member functions to avoid conflict of the names of
+        FileReaderLoaderClient functions.
+
+        No change in behavior, thus no new tests are added.
+
+        * platform/network/SocketStreamHandleClient.h:
+        (WebCore::SocketStreamHandleClient::didOpenSocketStream):
+        (WebCore::SocketStreamHandleClient::didCloseSocketStream):
+        (WebCore::SocketStreamHandleClient::didReceiveSocketStreamData):
+        (WebCore::SocketStreamHandleClient::didFailSocketStream):
+        * platform/network/brew/SocketStreamHandleBrew.cpp:
+        (WebCore::SocketStreamHandlePrivate::socketConnected):
+        (WebCore::SocketStreamHandlePrivate::socketReadyRead):
+        (WebCore::SocketStreamHandlePrivate::socketClosed):
+        (WebCore::SocketStreamHandlePrivate::socketError):
+        * platform/network/cf/SocketStreamHandleCFNet.cpp:
+        (WebCore::SocketStreamHandle::addCONNECTCredentials):
+        (WebCore::SocketStreamHandle::readStreamCallback):
+        (WebCore::SocketStreamHandle::writeStreamCallback):
+        (WebCore::SocketStreamHandle::reportErrorToClient):
+        (WebCore::SocketStreamHandle::platformClose):
+        * platform/network/qt/SocketStreamHandleQt.cpp:
+        (WebCore::SocketStreamHandlePrivate::socketConnected):
+        (WebCore::SocketStreamHandlePrivate::socketReadyRead):
+        (WebCore::SocketStreamHandlePrivate::socketClosedCallback):
+        (WebCore::SocketStreamHandlePrivate::socketErrorCallback):
+        * platform/network/soup/SocketStreamHandleSoup.cpp:
+        (WebCore::SocketStreamHandle::connected):
+        (WebCore::SocketStreamHandle::readBytes):
+        (WebCore::SocketStreamHandle::platformSend):
+        (WebCore::SocketStreamHandle::platformClose):
+        * websockets/WebSocketChannel.cpp:
+        (WebCore::WebSocketChannel::didOpenSocketStream):
+        (WebCore::WebSocketChannel::didCloseSocketStream):
+        (WebCore::WebSocketChannel::didReceiveSocketStreamData):
+        (WebCore::WebSocketChannel::didFailSocketStream):
+        (WebCore::WebSocketChannel::resumeTimerFired):
+        * websockets/WebSocketChannel.h:
+
+2011-07-31  Sheriff Bot  <webkit.review.bot@gmail.com>
+
+        Unreviewed, rolling out r92094.
+        http://trac.webkit.org/changeset/92094
+        https://bugs.webkit.org/show_bug.cgi?id=65443
+
+        Triggered many asserts (Requested by abarth on #webkit).
+
+        * dom/EventDispatcher.cpp:
+        (WebCore::EventDispatcher::dispatchEvent):
+
+2011-07-31  Dominic Cooney  <dominicc@chromium.org>
+
+        Event target set to null post event dispatch
+        https://bugs.webkit.org/show_bug.cgi?id=63934
+
+        Reviewed by Dimitri Glazkov.
+
+        Test: fast/events/event-target-reset.html
+
+        * dom/EventDispatcher.cpp:
+        (WebCore::EventDispatcher::dispatchEvent): Reset target to outermost
+        shadow host.
+
+2011-07-31  Sam Weinig  <sam@webkit.org>
+
+        REGRESSION: getBoundingClientRect() method of Range incorrectly returns null for collapsed Range
+        https://bugs.webkit.org/show_bug.cgi?id=65324
+
+        Reviewed by Ryosuke Niwa.
+
+        Update to more closely match the spec.
+
+        * dom/Range.cpp:
+        (WebCore::Range::getClientRects):
+        Return an empty ClientRectList instead of null when the range is empty.
+
+        (WebCore::Range::getBoundingClientRect):
+        Always return a ClientRect, even for an empty bounding rect.
+
+2011-07-29  Ryosuke Niwa  <rniwa@webkit.org>
+
+        [HTML5] Implement the selectionDirection property on input and textarea
+        https://bugs.webkit.org/show_bug.cgi?id=60403
+
+        Reviewed by Darin Adler.
+
+        Implements selectionDirection property as specified in HTML5 section 4.10.20:
+        http://www.whatwg.org/specs/web-apps/current-work/#textFieldSelection
+
+        selectionDirection is a property on input and textarea elements, which, on getting returns either "none",
+        "forward", or "backward" corresponding to the current selection direction, and on setting, modifies
+        the direction of the current selection. When selection doesn't exist or direction is unknown, "none"
+        is returned on getting. Setting the property value to neither of above values will result in setting "none".
+
+        This patch also adds the optional third argument, direction, to setSelectionRange.
+
+        Test: fast/forms/selection-direction.html
+              fast/forms/selection-wrongtype.html
+
+        * bindings/js/JSHTMLInputElementCustom.cpp:
+        (WebCore::JSHTMLInputElement::selectionDirection): Added.
+        (WebCore::JSHTMLInputElement::setSelectionDirection): Added.
+        (WebCore::JSHTMLInputElement::setSelectionRange): Processes the third argument.
+        * bindings/v8/custom/V8HTMLInputElementCustom.cpp:
+        (WebCore::V8HTMLInputElement::selectionDirectionAccessorGetter): Added.
+        (WebCore::V8HTMLInputElement::selectionDirectionAccessorSetter): Added.
+        (WebCore::V8HTMLInputElement::setSelectionRangeCallback): Processes the third argument.
+        * html/HTMLTextAreaElement.cpp:
+        (WebCore::HTMLTextAreaElement::updateFocusAppearance): Calls hasCachedSelection.
+        * html/HTMLInputElement.cpp:
+        (WebCore::HTMLInputElement::updateFocusAppearance): Ditto.
+        (WebCore::HTMLInputElement::setValue): Calls cacheSelection with SelectionHasNoDirection.
+        * html/HTMLTextAreaElement.idl: Added selectionDirection and the third argument to setSelectionRange.
+        * html/HTMLInputElement.idl: Ditto.
+        * html/HTMLTextFormControlElement.cpp:
+        (WebCore::HTMLTextFormControlElement::HTMLTextFormControlElement): Initializes
+        m_cachedSelectionDirection.
+        (WebCore::HTMLTextFormControlElement::setSelectionStart): Calls setSelectionRange.
+        (WebCore::HTMLTextFormControlElement::setSelectionEnd): Ditto.
+        (WebCore::HTMLTextFormControlElement::setSelectionDirection): Added.
+        (WebCore::HTMLTextFormControlElement::select): Calls setSelectionRange with SelectionHasNoDirection.
+        (WebCore::HTMLTextFormControlElement::setSelectionRange): Added the version that takes direction
+        string as the third argument, which calls the version that takes two ints and TextFieldSelectionDirection.
+        (WebCore::HTMLTextFormControlElement::selectionStart): Calls hasCachedSelection.
+        (WebCore::HTMLTextFormControlElement::selectionEnd): Ditto.
+        (WebCore::directionString): Added.
+        (WebCore::HTMLTextFormControlElement::selectionDirection): Added.
+        (WebCore::HTMLTextFormControlElement::computeSelectionDirection): Added.
+        (WebCore::HTMLTextFormControlElement::selection): Calls hasCachedSelection.
+        (WebCore::HTMLTextFormControlElement::restoreCachedSelection): Calls setSelectionRange.
+        (WebCore::HTMLTextFormControlElement::selectionChanged): Calls cacheSelection.
+        * html/HTMLTextFormControlElement.h:
+        (WebCore::HTMLTextFormControlElement::cacheSelection): Takes TextFieldSelectionDirection.
+        (WebCore::HTMLTextFormControlElement::hasCachedSelection): Extracted from hasCachedSelectionStart;
+        cacheSelection is the only function that modifies m_cacheSelectionStart and m_cacheSelectionEnd
+        and none of its callers ever set one of them be -1 so they are always both -1 or both non-negative.
+        Thus, having two separate functions for m_cacheSelectionStart and m_cacheSelectionEnd was redundant.
+
+2011-07-31  Daniel Bates  <dbates@webkit.org>
+
+        [GTK] Remove unused variable coreChild in WebCore::getChildForTable()
+        https://bugs.webkit.org/show_bug.cgi?id=65427
+
+        This variable was unused when it was initially added in <http://trac.webkit.org/changeset/89660> (bug #62718)
+        and it is unused today. We should remove it. This will also resolve a compiler warning.
+
+        Reviewed by Xan Lopez.
+
+        * accessibility/gtk/AccessibilityObjectWrapperAtk.cpp:
+        (getChildForTable):
+
+2011-07-30  Daniel Bates  <dbates@webkit.org>
+
+        Fix the WinCairo Debug build after <http://trac.webkit.org/changeset/91914>
+        (https://bugs.webkit.org/show_bug.cgi?id=64744)
+
+        * WebCore.vcproj/WebCore.vcproj: Remove ContextShadowCairo.cpp from the build since this
+          file was deleted in <http://trac.webkit.org/changeset/91914>.
+
+2011-07-30  Daniel Bates  <dbates@webkit.org>
+
+        Fix the Chromium Linux Release Flexbot build after <http://trac.webkit.org/changeset/92004>
+        (https://bugs.webkit.org/show_bug.cgi?id=65342)
+
+        * rendering/RenderFlexibleBox.cpp:
+        (WebCore::RenderFlexibleBox::layoutBlock): Update the definition of RenderFlexibleBox::layoutBlock()
+        to be consistent with its declaration in RenderFlexibleBox.h; Add argument layoutPass of type BlockLayoutPass.
+
+2011-07-30  Adam Barth  <abarth@webkit.org>
+
+        Update run-bindings-tests results after
+        http://trac.webkit.org/changeset/92068
+
+        * bindings/scripts/test/JS/JSTestCallback.cpp:
+
+2011-07-30  Patrick Gansterer  <paroga@webkit.org>
+
+        Remove inclusion of MainThread.h from Threading.h
+        https://bugs.webkit.org/show_bug.cgi?id=65081
+
+        Reviewed by Darin Adler.
+
+        Add missing include statements for MainThread.
+
+        * bindings/js/DOMWrapperWorld.cpp:
+        * bindings/js/JSDOMWindowBase.cpp:
+        * bindings/scripts/CodeGeneratorJS.pm:
+        (GenerateCallbackImplementation):
+        * bindings/v8/DOMDataStore.cpp:
+        * bindings/v8/DOMWrapperWorld.cpp:
+        * bindings/v8/V8Binding.cpp:
+        * bindings/v8/V8DOMMap.cpp:
+        * bindings/v8/V8DOMWrapper.h:
+        * dom/EventTarget.cpp:
+        * fileapi/LocalFileSystem.cpp:
+        * loader/CrossOriginPreflightResultCache.cpp:
+        * loader/ResourceLoadScheduler.cpp:
+        * loader/WorkerThreadableLoader.cpp:
+        * loader/appcache/ApplicationCacheGroup.cpp:
+        * page/DOMWindow.cpp:
+        * page/History.cpp:
+        * page/SecurityOrigin.cpp:
+        * page/mac/EventHandlerMac.mm:
+        * platform/MIMETypeRegistry.cpp:
+        * platform/ThreadGlobalData.cpp:
+        * platform/ThreadTimers.cpp:
+        * platform/TreeShared.h:
+        * platform/audio/HRTFDatabaseLoader.cpp:
+        * platform/graphics/Font.cpp:
+        * platform/graphics/FontFallbackList.h:
+        * platform/graphics/FontFastPath.cpp:
+        * platform/graphics/Image.cpp:
+        * platform/graphics/avfoundation/MediaPlayerPrivateAVFoundation.cpp:
+        * platform/graphics/ca/win/WKCACFViewLayerTreeHost.cpp:
+        * platform/graphics/cg/ImageBufferCG.cpp:
+        * platform/graphics/chromium/LayerRendererChromium.cpp:
+        * platform/graphics/chromium/cc/CCLayerTreeHostImplProxy.cpp:
+        * platform/mac/LocalizedStringsMac.mm:
+        * platform/mac/SharedBufferMac.mm:
+        * platform/network/BlobResourceHandle.cpp:
+        * platform/network/cf/DNSCFNet.cpp:
+        * platform/network/cf/LoaderRunLoopCF.cpp:
+        * platform/text/LocalizedNumberICU.cpp:
+        * platform/text/TextEncodingRegistry.cpp:
+        * platform/text/mac/LocalizedNumberMac.mm:
+        * platform/win/LocalizedStringsWin.cpp:
+        * storage/LocalStorageThread.cpp:
+        * storage/StorageAreaImpl.cpp:
+        * storage/StorageAreaSync.cpp:
+        * storage/StorageNamespaceImpl.cpp:
+        * storage/StorageSyncManager.cpp:
+        * webaudio/AsyncAudioDecoder.cpp:
+        * webaudio/AudioBufferSourceNode.cpp:
+        * webaudio/AudioContext.h
+        * webaudio/AudioContext.cpp:
+        * webaudio/AudioNode.cpp:
+        * webaudio/ConvolverNode.cpp:
+        * webaudio/OfflineAudioDestinationNode.cpp:
+        * webaudio/RealtimeAnalyser.cpp:
+        * webaudio/WaveShaperNode.cpp:
+        * websockets/WorkerThreadableWebSocketChannel.cpp:
+        * workers/WorkerMessagingProxy.cpp:
+
+2011-07-30  Enrica Casucci  <enrica@apple.com>
+
+        REGRESSION: culledInlineAbsoluteRects needs to translate a 0,0 point to absolute
+        coordinates so that the top left position is accurate.
+        https://bugs.webkit.org/show_bug.cgi?id=65419
+        <rdar://problem/9408862>
+
+        This patch fixes a regression introduced in r83075.
+        Make sure that culledInlineAbsoluteRects still does
+        a translation of a 0,0 point to absolute coordinates so that the top left position is
+        accurate.
+        This code path could not be tested via JavaScript. The patch
+        extends the Internals object to be able to test this case.
+
+        Reviewed by Dan Bernstein.
+
+        Test: fast/inline/skipped-whitespace-boundingBox.html
+
+        * WebCore.exp.in: Added some exports.
+        * rendering/RenderInline.cpp:
+        (WebCore::RenderInline::culledInlineAbsoluteRects):
+        * testing/Internals.cpp:
+        (WebCore::Internals::boundingBox):
+        * testing/Internals.h:
+        * testing/Internals.idl:
+
+2011-07-26  Pavel Podivilov  <podivilov@chromium.org>
+
+        Web Inspector: move location conversion functions to SourceFile.
+        https://bugs.webkit.org/show_bug.cgi?id=65185
+
+        Reviewed by Pavel Feldman.
+
+        Test: inspector/debugger/source-file.html
+
+        * inspector/front-end/DebuggerPresentationModel.js:
+        (WebInspector.DebuggerPresentationModel.prototype._scriptLocationToUILocation.didCreateSourceMapping):
+        (WebInspector.DebuggerPresentationModel.prototype._scriptLocationToUILocation):
+        (WebInspector.DebuggerPresentationModel.prototype._uiLocationToScriptLocation.didCreateSourceMapping):
+        (WebInspector.DebuggerPresentationModel.prototype._uiLocationToScriptLocation):
+        * inspector/front-end/SourceFile.js:
+        (WebInspector.SourceFile.prototype.rawLocationToUILocation):
+        (WebInspector.SourceFile.prototype.uiLocationToRawLocation):
+        (WebInspector.SourceFile.prototype._scriptForRawLocation):
+        (WebInspector.SourceFile.prototype.createSourceMappingIfNeeded):
+        (WebInspector.FormattedSourceFile.prototype.createSourceMappingIfNeeded):
+        (WebInspector.FormattedSourceFile.prototype._didRequestContent):
+
+2011-07-29  Rob Buis  <rbuis@rim.com>
+
+        URL references are completely broken in SVG
+        https://bugs.webkit.org/show_bug.cgi?id=63283
+
+        Reviewed by Nikolas Zimmermann.
+
+        Change SVGURIElement::getTarget to be more strict about iri resolving and make it serve as a central
+        place to resolve a iri to a SVGElement. The iri can be same-document or external, for now we only handle
+        the former, the latter will be handled in bug 65344.
+        Accept as same-document if the iri combined with the base uri equals the document url (ignoring
+        the fragment identifier). For convenience a method is added to lookup the element, if found.
+
+        Tests: svg/custom/external-paintserver-reference.svg
+               svg/custom/linking-base-external-reference.xhtml
+               svg/custom/uri-reference-handling.svg
+
+        * css/CSSCursorImageValue.cpp:
+        (WebCore::resourceReferencedByCursorElement):
+        (WebCore::CSSCursorImageValue::~CSSCursorImageValue):
+        (WebCore::CSSCursorImageValue::updateIfSVGCursorIsUsed):
+        * css/CSSFontFaceSource.cpp:
+        (WebCore::CSSFontFaceSource::getFontData):
+        * css/CSSFontSelector.h:
+        (WebCore::CSSFontSelector::document):
+        * css/SVGCSSStyleSelector.cpp:
+        (WebCore::CSSStyleSelector::applySVGProperty):
+        * rendering/svg/RenderSVGTextPath.cpp:
+        (WebCore::RenderSVGTextPath::layoutPath):
+        * rendering/svg/SVGResources.cpp:
+        (WebCore::targetReferenceFromResource):
+        (WebCore::paintingResourceFromSVGPaint):
+        * svg/SVGAltGlyphElement.cpp:
+        (WebCore::SVGAltGlyphElement::hasValidGlyphElements):
+        * svg/SVGFEImageElement.cpp:
+        (WebCore::SVGFEImageElement::requestImageResource):
+        (WebCore::SVGFEImageElement::build):
+        * svg/SVGGlyphRefElement.cpp:
+        (WebCore::SVGGlyphRefElement::hasValidGlyphElement):
+        * svg/SVGLinearGradientElement.cpp:
+        (WebCore::SVGLinearGradientElement::collectGradientAttributes):
+        * svg/SVGMPathElement.cpp:
+        (WebCore::SVGMPathElement::pathElement):
+        * svg/SVGPaint.cpp:
+        (WebCore::SVGPaint::matchesTargetURI):
+        * svg/SVGPatternElement.cpp:
+        (WebCore::SVGPatternElement::collectPatternAttributes):
+        * svg/SVGRadialGradientElement.cpp:
+        (WebCore::SVGRadialGradientElement::collectGradientAttributes):
+        * svg/SVGTRefElement.cpp:
+        (WebCore::SVGTRefElement::updateReferencedText):
+        (WebCore::SVGTRefElement::svgAttributeChanged):
+        (WebCore::SVGTRefElement::buildPendingResource):
+        * svg/SVGTextPathElement.cpp:
+        (WebCore::SVGTextPathElement::insertedIntoDocument):
+        * svg/SVGURIReference.cpp:
+        (WebCore::SVGURIReference::fragmentIdentifierFromIRIString):
+        (WebCore::SVGURIReference::targetElementFromIRIString):
+        * svg/SVGURIReference.h:
+        * svg/SVGUseElement.cpp:
+        (WebCore::SVGUseElement::buildPendingResource):
+        (WebCore::SVGUseElement::hasCycleUseReferencing):
+        (WebCore::SVGUseElement::expandUseElementsInShadowTree):
+        * svg/animation/SVGSMILElement.cpp:
+        (WebCore::SVGSMILElement::targetElement):
+
+2011-07-29  James Simonsen  <simonjam@chromium.org>
+
+        Remove zipcar.com site specific hack added in r87361
+        https://bugs.webkit.org/show_bug.cgi?id=65405
+
+        Reviewed by Adam Barth.
+
+        * html/HTMLScriptElement.cpp:
+        (WebCore::HTMLScriptElement::insertedIntoDocument):
+
+2011-07-29  James Robinson  <jamesr@chromium.org>
+
+        [chromium] Reorder functions in LayerRendererChromium.cpp to make bug 58840 easier to review
+        https://bugs.webkit.org/show_bug.cgi?id=65354
+
+        Reviewed by Kenneth Russell.
+
+        This moves a few function definitions in LayerRendererChromium around to make the patch on bug 58840 easier to
+        review.  In that patch, updatePropertiesAndRenderSurfaces() becomes a templated free function instead of a
+        member function, so it has to be near the top of the .cpp.
+
+        * platform/graphics/chromium/LayerRendererChromium.cpp:
+        (WebCore::calculateVisibleRect):
+        (WebCore::isScaleOrTranslation):
+        (WebCore::LayerRendererChromium::updatePropertiesAndRenderSurfaces):
+        (WebCore::LayerRendererChromium::updateLayers):
+
+2011-07-29  Jeff Miller  <jeffm@apple.com>
+
+        Work-in-progress on Adopt AVCF media back end on Windows
+        https://bugs.webkit.org/show_bug.cgi?id=65400
+        <rdar://problem/9083559>
+        
+        Prepare WebCore.vcproj to support AVCF media back end on Windows.
+
+        Reviewed by Darin Adler.
+
+        No changes to functionality so no new tests.
+
+        * WebCore.vcproj/WebCore.vcproj: Added MediaPlayerPrivateAVFoundation and MediaPlayerPrivateAVFoundationCF sources.
+        * WebCore.vcproj/WebCoreMediaQT.vsprops: Added additional include directories and dleay load DLLs for AVCF.
+        * platform/graphics/avfoundation/MediaPlayerPrivateAVFoundationCF.cpp: Added, just a stub for now.
+        * platform/graphics/avfoundation/MediaPlayerPrivateAVFoundationCF.h: Added, just a stub for now.
+
+2011-07-29  Jeff Miller  <jeffm@apple.com>
+
+        Work-in-progress on Adopt AVCF media back end on Windows
+        https://bugs.webkit.org/show_bug.cgi?id=65400
+        <rdar://problem/9083559>
+        
+        Make MediaPlayerPrivateAVFoundation::setDelayCallbacks() const and make the ivars
+        it references mutable so other const member functions can call it.
+
+        Reviewed by Darin Adler.
+
+        No changes to functionality so no new tests.
+
+        * platform/graphics/avfoundation/MediaPlayerPrivateAVFoundation.cpp:
+        (WebCore::MediaPlayerPrivateAVFoundation::setDelayCallbacks):
+        * platform/graphics/avfoundation/MediaPlayerPrivateAVFoundation.h:
+
+2011-07-29  Zhenyao Mo  <zmo@google.com>
+
+        Unreviewed, rolling out r92011.
+        http://trac.webkit.org/changeset/92011
+        https://bugs.webkit.org/show_bug.cgi?id=65044
+
+        break chromium win build
+
+        * dom/WheelEvent.cpp:
+        (WebCore::WheelEvent::WheelEvent):
+        (WebCore::WheelEvent::initWheelEvent):
+        * dom/WheelEvent.h:
+        * page/EventHandler.cpp:
+        (WebCore::EventHandler::EventHandler):
+        (WebCore::EventHandler::handleGestureEvent):
+        (WebCore::EventHandler::handleTouchEvent):
+        (WebCore::EventHandler::resetGestureRecognizer):
+        * page/EventHandler.h:
+        * page/FrameView.cpp:
+        (WebCore::FrameView::reset):
+        * platform/PlatformGestureEvent.h:
+        * platform/PlatformGestureRecognizer.h:
+        * platform/ScrollAnimatorWin.cpp:
+        * platform/chromium/FramelessScrollView.h:
+        * platform/chromium/GestureRecognizerChromium.cpp:
+        (WebCore::InnerGestureRecognizer::InnerGestureRecognizer):
+        (WebCore::InnerGestureRecognizer::reset):
+        (WebCore::InnerGestureRecognizer::dispatchSyntheticClick):
+        (WebCore::InnerGestureRecognizer::processTouchEventForGesture):
+        (WebCore::InnerGestureRecognizer::scrollViaTouchMotion):
+        (WebCore::touchDown):
+        (WebCore::noGesture):
+        (WebCore::click):
+        (WebCore::isClickOrScroll):
+        (WebCore::inScroll):
+        * platform/chromium/GestureRecognizerChromium.h:
+        (WebCore::GestureRecognizerChromium::reset):
+        (WebCore::GestureRecognizerChromium::processTouchEventForGesture):
+        * platform/chromium/PopupMenuChromium.cpp:
+        * platform/chromium/PopupMenuChromium.h:
+        * platform/mac/ScrollAnimatorMac.mm:
+        (WebCore::ScrollAnimatorMac::handleGestureEvent):
+
+2011-07-29  Adrienne Walker  <enne@google.com>
+
+        [chromium] Only force slow scrolling for iframes under --force-compositing-mode
+        https://bugs.webkit.org/show_bug.cgi?id=65394
+
+        Reviewed by James Robinson.
+
+        The previous code introduced by r91591 made composited frames as well
+        as non-composited subframes go down the slow scrolling path.  Adjust
+        the check to use ownerElement to test for subframe and use
+        hasCompositedContent() which is a more correct test for compositing
+        than isEnclosedInCompositingLayer.
+
+        * page/FrameView.cpp:
+        (WebCore::FrameView::useSlowRepaints):
+
+2011-07-29  Emil A Eklund  <eae@chromium.org>
+
+        -webkit-marquee with anonymous node causes segmentation fault in Node::document
+        https://bugs.webkit.org/show_bug.cgi?id=64693
+
+        Reviewed by Simon Fraser.
+
+        Test: fast/css/webkit-marquee-anonymous-node-crash.html
+
+        * rendering/RenderLayer.cpp:
+        (WebCore::RenderLayer::scrollTo):
+        Add null check as renderer()->node() is null for anonymous nodes.
+
+2011-07-29  Mike Reed  <reed@google.com>
+
+        [skia] never draw with GDI, so that all text can be gpu-accelerated
+        https://bugs.webkit.org/show_bug.cgi?id=65203
+
+        Reviewed by Kenneth Russell.
+
+        * platform/graphics/chromium/FontChromiumWin.cpp:
+        (WebCore::TransparencyAwareFontPainter::TransparencyAwareFontPainter::TransparencyAwareFontPainter):
+        (WebCore::TransparencyAwareFontPainter::TransparencyAwareGlyphPainter::TransparencyAwareGlyphPainter):
+        (WebCore::TransparencyAwareFontPainter::TransparencyAwareGlyphPainter::drawGlyphs):
+        (WebCore::TransparencyAwareFontPainter::TransparencyAwareUniscribePainter::TransparencyAwareUniscribePainter):
+        (WebCore::drawGlyphsWin):
+        (WebCore::Font::drawComplexText):
+        * platform/graphics/chromium/UniscribeHelper.cpp:
+        (WebCore::UniscribeHelper::draw):
+        * platform/graphics/skia/PlatformContextSkia.cpp:
+        * platform/graphics/skia/PlatformContextSkia.h:
+        * platform/graphics/skia/SkiaFontWin.cpp:
+        * platform/graphics/skia/SkiaFontWin.h:
+
+2011-07-29  Sam Weinig  <sam@webkit.org>
+
+        Move Region code from WebKit2 to WebCore
+        https://bugs.webkit.org/show_bug.cgi?id=65392
+
+        Reviewed by David Hyatt.
+
+        * CMakeLists.txt:
+        * GNUmakefile.list.am:
+        * WebCore.gypi:
+        * WebCore.pro:
+        * WebCore.vcproj/WebCore.vcproj:
+        * WebCore.xcodeproj/project.pbxproj:
+        Update project files.
+
+        * WebCore.exp.in:
+        Update exports.
+
+        * platform/graphics/Region.cpp: Copied from Source/WebKit2/Platform/Region.cpp.
+        * platform/graphics/Region.h: Copied from Source/WebKit2/Platform/Region.h.
+        Add files.
+
+2011-07-29  Robert Kroeger  <rjkroege@chromium.org>
+
+        [chromium] Layering violations in gesture recognizer
+        https://bugs.webkit.org/show_bug.cgi?id=65044
+
+        Reviewed by Adam Barth.
+
+        Divided the gesture recognizer up to correct a layering
+        violation by moving gesture implementation from it to
+        EventHandler::handleGestureEvent so that the gesture recognizer
+        could simply be an engine for generating gesture events from
+        touch events.
+
+        * dom/WheelEvent.cpp:
+        (WebCore::WheelEvent::WheelEvent):
+        (WebCore::WheelEvent::initWheelEvent):
+        * dom/WheelEvent.h:
+        Added symbolic contstant for tick multiplier.
+        * page/EventHandler.cpp:
+        (WebCore::EventHandler::EventHandler):
+        Removed construction of gesture recognizer.
+        (WebCore::EventHandler::handleGestureEvent):
+        Extended for new gesture events added in this patch.
+        (WebCore::EventHandler::handleTouchEvent):
+        Removed call into gesture recognizer.
+        * page/EventHandler.h:
+        * page/FrameView.cpp:
+        (WebCore::FrameView::reset):
+        Removed code to reset gesture recognizer.
+        * platform/PlatformGestureEvent.h:
+        (WebCore::PlatformGestureEvent::PlatformGestureEvent):
+        (WebCore::PlatformGestureEvent::deltaX):
+        (WebCore::PlatformGestureEvent::deltaY):
+        (WebCore::PlatformGestureEvent::shiftKey):
+        (WebCore::PlatformGestureEvent::ctrlKey):
+        (WebCore::PlatformGestureEvent::altKey):
+        (WebCore::PlatformGestureEvent::metaKey):
+        Added additional gesture types and parameters.
+        * platform/PlatformGestureRecognizer.h:
+        * platform/ScrollAnimatorWin.cpp:
+        (WebCore::ScrollAnimatorWin::handleGestureEvent):
+        Added missing method needed to fix the build on windows.
+        * platform/chromium/FramelessScrollView.h:
+        Added support for displatching gesture and touch events.
+        * platform/chromium/GestureRecognizerChromium.cpp:
+        (WebCore::InnerGestureRecognizer::InnerGestureRecognizer):
+        (WebCore::InnerGestureRecognizer::reset):
+        (WebCore::InnerGestureRecognizer::constructClickGestureEvent):
+        (WebCore::InnerGestureRecognizer::processTouchEventForGestures):
+        Removed all depedencies on EventHandler. Instead, create gesture
+        events from touch event stream.
+        (WebCore::InnerGestureRecognizer::constructScrollGesture):
+        (WebCore::touchDown):
+        (WebCore::noGesture):
+        (WebCore::click):
+        (WebCore::isClickOrScroll):
+        (WebCore::inScroll):
+        (WebCore::GestureRecognizerChromium::processTouchEventForGestures):
+        (WebCore::GestureRecognizerChromium::reset):
+        * platform/chromium/GestureRecognizerChromium.h:
+        * platform/chromium/PopupMenuChromium.cpp:
+        Added support to handle touch events and gesture events.
+        (WebCore::PopupContainer::handleTouchEvent):
+        (WebCore::PopupContainer::handleGestureEvent):
+        (WebCore::PopupListBox::handleTouchEvent):
+        (WebCore::PopupListBox::handleGestureEvent):
+        * platform/chromium/PopupMenuChromium.h:
+        * platform/mac/ScrollAnimatorMac.mm:
+        (WebCore::ScrollAnimatorMac::handleGestureEvent):
+        Ignores the newly added gesture event types.
+
+2011-07-29  Eric Carlson  <eric.carlson@apple.com>
+
+        Load delegate not consulted before loading some poster images
+        https://bugs.webkit.org/show_bug.cgi?id=65270
+
+        Reviewed by Joseph Pecoraro.
+
+        * html/HTMLVideoElement.cpp:
+        (WebCore::HTMLVideoElement::setDisplayMode): Don't ask a load delegate if it is OK to 
+            load an empty poster url.
+
+2011-07-29  Jeff Miller  <jeffm@apple.com>
+
+        Re-sort one more file in the WebCore project with Visual Studio.
+
+        * WebCore.vcproj/WebCore.vcproj:
+
+2011-07-29  Jeff Miller  <jeffm@apple.com>
+
+        Re-sort the WebCore project with Visual Studio after recent changes that I assume were done by manually editing the XML.
+
+        * WebCore.vcproj/WebCore.vcproj:
+
+2011-07-29  Dan Bernstein  <mitz@apple.com>
+
+        Added the regional indicator symbols to the set of codepoints that force use of the complex text code path.
+
+        Fixes <rdar://problem/9864578> Regional indicator symbols do not combine into national flags
+        https://bugs.webkit.org/show_bug.cgi?id=65380
+
+        Reviewed by Anders Carlsson.
+
+        Test: fast/text/regional-indicator-symobls.html
+
+        * platform/graphics/Font.cpp:
+        (WebCore::Font::codePath): Added handling of surrogate pairs, which returns Complex for characters in
+        the range U+1F1E6..U+1F1FF.
+
+2011-07-28  David Hyatt  <hyatt@apple.com>
+
+        https://bugs.webkit.org/show_bug.cgi?id=65342
+
+        Add support for positioned floats being placed into a RenderBlock's FloatingObject list and for
+        correct propagation of those floating objects into descendants.
+
+        Reviewed by Sam Weinig.
+
+        * rendering/RenderBlock.cpp:
+        (WebCore::RenderBlock::layoutBlock):
+        The positioned float layout algorithm is 2-pass. You lay out without the positioned objects, and then
+        once they have been placed, you lay out again and use that placement to determine the float positions.
+        layoutBlock now has an extra parameter to indicate which layout pass you are in.
+        
+        (WebCore::RenderBlock::addOverflowFromFloats):
+        Don't add overflow from positioned floats ever, since the positioning overflow function takes care of that
+        already.
+
+        (WebCore::RenderBlock::layoutBlockChild):
+        Include positioned floats in the lowestFloatLogicalBottom we look at so that overhang is computed properly.
+
+        (WebCore::RenderBlock::simplifiedLayout):
+        If layoutPositionedObjects indicates that a positioned float moved, then we can't do simplified layout. Bail
+        instead and do a full layout.
+
+        (WebCore::RenderBlock::positionedFloatsNeedRelayout):
+        Helper for layoutBlock in order to bypass the 2-pass model if we can detect that none of the positioned objects
+        will actually need to lay out again. This allows incremental layout to not always fault back to 2-pass as normal
+        flow content streams in.
+
+        (WebCore::RenderBlock::layoutPositionedObjects):
+        Modified to return a boolean indicating whether a positioned float got a layout. If so, we will lay out again
+        once our positioned objects are placed.
+
+        (WebCore::RenderBlock::insertFloatingObject):
+        insertFloatingObject can now handle positioned objects being inserted.
+
+        (WebCore::RenderBlock::positionNewFloats):
+        positionNewFloats doesn't attempt to position this new type of float. It only handles left/right floats.
+
+        (WebCore::RenderBlock::addPositionedFloats):
+        Helper to add in the floating objects for positioned floats. This is used instead of positionNewFloats and
+        just walks the positioned objects instead.
+
+        (WebCore::RenderBlock::clearFloats):
+        clearFloats now handles adding in positioned floats if the layout pass says they should be included.
+
+        (WebCore::RenderBlock::marginLogicalLeftForChild):
+        (WebCore::RenderBlock::marginLogicalRightForChild):
+        New helpers used by addPositionedFloats.
+    
+        (WebCore::RenderBlock::FloatingObjects::clear):
+        (WebCore::RenderBlock::FloatingObjects::increaseObjectsCount):
+        (WebCore::RenderBlock::FloatingObjects::decreaseObjectsCount):
+        Make sure the object count tracking handles positioned floats as well as left/right floats.
+    
+        * rendering/RenderBlock.h:
+        (WebCore::RenderBlock::logicalLeftForChild):
+        New helper used by addPositionedFloats.
+
+        (WebCore::RenderBlock::FloatingObject::FloatingObject):
+        Change the constructor to take the RenderStyle enum. This makes the construction simpler.
+
+        (WebCore::RenderBlock::hasPositionedFloats):
+        A bit tracks whether or not a block has positioned floats in its positioned objects list.
+
+        (WebCore::RenderBlock::hasOverhangingFloats):
+        Modified to include positioned floats.
+
+        (WebCore::RenderBlock::lowestFloatLogicalBottom):
+        This function excludes positioned floats by default, so that places that - for example - expand to
+        encompass their lowestFloatLogicalBottom won't accidentally expand to encompass positioned objects.
+
+        (WebCore::RenderBlock::lowestFloatLogicalBottomIncludingPositionedFloats):
+        A new function that includes positioned floats for callers that care.
+
+        (WebCore::RenderBlock::FloatingObjects::FloatingObjects):
+        (WebCore::RenderBlock::FloatingObjects::hasPositionedObjects):
+        The object count tracking for positioned floats within a block's FloatingObjects list.
+
+        * rendering/RenderBox.cpp:
+        (WebCore::RenderBox::updateBoxModelInfoFromStyle):
+        Make sure isFloating is set even if isPositioned is also set for the positioned float case.
+
+        * rendering/RenderDeprecatedFlexibleBox.cpp:
+        (WebCore::RenderDeprecatedFlexibleBox::layoutBlock):
+        Modified to do the extra layout pass if needed.
+
+2011-07-29  Scott Byer  <scottbyer@chromium.org>
+
+        Scroll animation refinements.
+        https://bugs.webkit.org/show_bug.cgi?id=65154
+
+        Reviewed by Adam Barth.
+
+        Fix scroll animation bugs when scrolling to the ends of a document. Smooth over slow event repeat rates
+        better. Fix tests to allow for unit testing of scrolling up and not just down.
+
+        Additional unit tests added to ScrollAnimatorNoneTest:
+        ScrollQuadraticSmoothed, ScrollLotsQuadraticSmoothed, ScrollDownToBumper, ScrollUpToBumper
+
+        * platform/ScrollAnimatorNone.cpp:
+        (WebCore::ScrollAnimatorNone::Parameters::Parameters):
+        (WebCore::ScrollAnimatorNone::PerAxisData::updateDataFromParameters):
+        (WebCore::ScrollAnimatorNone::scroll):
+        * platform/ScrollAnimatorNone.h:
+
+2011-07-29  Samuel White  <samuel_white@apple.com>
+
+        Add the ability to search the AccessibilityObject cache
+        https://bugs.webkit.org/show_bug.cgi?id=64994
+        
+        To support searching the AccessibilityObject cache, we first need to
+        implement a minimal set of functions that will allow AccessibilityObjects
+        to be identified when searching using common search criteria. The additional
+        functions below complement the existing identification functionality already
+        available and together provide a basic working set to build search on top of.
+        Additionally, the blockquoteLevel function has been moved into the AccessibilityObject
+        class to make it available to all platforms.
+
+        Reviewed by Chris Fleizach.
+
+        New tests will be included in the following patch that will also implement
+        basic search functionality.
+
+        * accessibility/AccessibilityObject.cpp:
+        (WebCore::AccessibilityObject::isBlockquote):
+        (WebCore::AccessibilityObject::isLandmark):
+        (WebCore::AccessibilityObject::hasMisspelling):
+        (WebCore::AccessibilityObject::blockquoteLevel):
+        * accessibility/AccessibilityObject.h:
+        (WebCore::AccessibilityObject::isUnvisited):
+        (WebCore::AccessibilityObject::hasBoldFont):
+        (WebCore::AccessibilityObject::hasItalicFont):
+        (WebCore::AccessibilityObject::hasPlainText):
+        (WebCore::AccessibilityObject::hasSameFont):
+        (WebCore::AccessibilityObject::hasSameFontColor):
+        (WebCore::AccessibilityObject::hasSameStyle):
+        (WebCore::AccessibilityObject::hasStaticText):
+        (WebCore::AccessibilityObject::hasUnderline):
+        (WebCore::AccessibilityObject::tableLevel):
+        * accessibility/AccessibilityRenderObject.cpp:
+        (WebCore::AccessibilityRenderObject::isUnvisited):
+        (WebCore::AccessibilityRenderObject::hasBoldFont):
+        (WebCore::AccessibilityRenderObject::hasItalicFont):
+        (WebCore::AccessibilityRenderObject::hasPlainText):
+        (WebCore::AccessibilityRenderObject::hasSameFont):
+        (WebCore::AccessibilityRenderObject::hasSameFontColor):
+        (WebCore::AccessibilityRenderObject::hasSameStyle):
+        (WebCore::AccessibilityRenderObject::hasUnderline):
+        * accessibility/AccessibilityRenderObject.h:
+        * accessibility/AccessibilityTable.cpp:
+        (WebCore::AccessibilityTable::tableLevel):
+        * accessibility/AccessibilityTable.h:
+        * accessibility/mac/AccessibilityObjectWrapper.mm:
+        (AXAttributeStringSetBlockquoteLevel):
+        (-[AccessibilityObjectWrapper accessibilityAttributeValue:]):
+
+2011-07-29  Zeng Huiqing  <huiqing.zeng@intel.com>
+
+        Avoid calling animation timer updates while the page is loading
+        https://bugs.webkit.org/show_bug.cgi?id=64851
+
+        Reviewed by Simon Fraser.
+
+        There is no need to update the animation timer for a RenderObject that has not yet been inserted into the render tree, or that doesn't have animations. Our tests show that this improves page loading by up to 3x on pages with a large number of transitionable objects.
+
+        * page/animation/AnimationController.cpp:
+        (WebCore::AnimationController::updateAnimations):
+
+2011-07-29  Anders Carlsson  <andersca@apple.com>
+
+        Pass the HTTP referrer header for URLs loaded by plug-ins
+        https://bugs.webkit.org/show_bug.cgi?id=65379
+        <rdar://problem/9822116>
+
+        Reviewed by Sam Weinig.
+
+        Export a symbol needed by WebKit2.
+
+        * WebCore.exp.in:
+
+2011-07-28  Leandro Gracia Gil  <leandrogracia@chromium.org>
+
+        Fix speech input icon rect on RTL directions.
+        https://bugs.webkit.org/show_bug.cgi?id=65333
+
+        Reviewed by Tony Gentilcore.
+
+        No new tests. This is used by platforms, not WebCore, and
+        the base functionality is not changed but only the failing cases.
+
+        * html/shadow/TextControlInnerElements.cpp:
+        (WebCore::InputFieldSpeechButtonElement::defaultEventHandler):
+
+2011-07-29  Kent Tamura  <tkent@chromium.org>
+
+        Make the ExceptionCode argument of Element::setShadowPseudoId() ASSERT_NO_EXCEPTION by default
+        https://bugs.webkit.org/show_bug.cgi?id=65363
+
+        Reviewed by Hajime Morita.
+
+        No new tests. Cleanup-only.
+
+        * dom/Element.h: Make the ExceptionCode argument ASSERT_NO_EXCEPTION by default.
+        * html/ColorInputType.cpp:
+        (WebCore::ColorInputType::createShadowSubtree): Remove the ExceptionCode argument and ASSERT(!ec).
+        * html/HTMLTextAreaElement.cpp:
+        (WebCore::HTMLTextAreaElement::updatePlaceholderText): ditto.
+        * html/RangeInputType.cpp:
+        (WebCore::RangeInputType::createShadowSubtree): ditto.
+        * html/TextFieldInputType.cpp:
+        (WebCore::TextFieldInputType::createShadowSubtree): ditto.
+        (WebCore::TextFieldInputType::updatePlaceholderText): ditto.
+        * html/ValidationMessage.cpp:
+        (WebCore::ValidationMessage::buildBubbleTree): ditto.
+
+2011-07-28  Luke Macpherson   <macpherson@chromium.org>
+
+        Remove remaining uses of CSSPrimitiveValue::computeLengthIntForLength()
+        https://bugs.webkit.org/show_bug.cgi?id=64919
+
+        Reviewed by Darin Adler.
+
+        No new tests / cleanup only.
+
+        * css/CSSPrimitiveValue.cpp:
+        (WebCore::CSSPrimitiveValue::computeLength):
+        Remove implementation of computeLengthIntForLength()
+        * css/CSSPrimitiveValue.h:
+        Remove definition of computeLengthIntForLength()
+        * css/CSSStyleApplyProperty.cpp:
+        (WebCore::ApplyPropertyLength::applyValue):
+        Remove use of computeLengthIntForLength()
+        * css/CSSStyleSelector.cpp:
+        (WebCore::CSSStyleSelector::applyProperty):
+        Remove use of computeLengthIntForLength()
+        * platform/Length.h:
+        (WebCore::Length::setQuirk):
+        Adds the ability to set the m_quirk member variable after construction.
+
+2011-07-28  Anders Carlsson  <andersca@apple.com>
+
+        Unreviewed, rolling out r88601. (Requested by Sam Weinig).
+        http://trac.webkit.org/changeset/88601
+        https://bugs.webkit.org/show_bug.cgi?id=62230
+
+        Caused a regression, see https://bugs.webkit.org/show_bug.cgi?id=64378
+
+        * dom/StyledElement.cpp:
+        * dom/StyledElement.h:
+        * html/HTMLBodyElement.cpp:
+        (WebCore::HTMLBodyElement::parseMappedAttribute):
+        (WebCore::HTMLBodyElement::insertedIntoDocument):
+        (WebCore::HTMLBodyElement::didMoveToNewOwnerDocument):
+        * html/HTMLBodyElement.h:
+
+2011-07-28  Justin Schuh  <jschuh@chromium.org>
+
+        Simplify createCanonicalUUIDString implementation.
+        https://bugs.webkit.org/show_bug.cgi?id=65157
+
+        All ports support OS_RANDOMNESS, so better to have one implementation.
+
+        Reviewed by Adam Barth.
+
+        Change covered by existing tests.
+
+        * platform/UUID.cpp:
+        (WebCore::createCanonicalUUIDString):
+
+2011-07-28  Devdatta Deshpande  <pwjd73@motorola.com>
+
+        Fixed gif animation dependency on system time
+        https://bugs.webkit.org/show_bug.cgi?id=64996
+
+        Reviewed by James Robinson.
+
+        Test: Load WebCore/manual-tests/animated-gif-looping.html
+        Change system time to a time in past
+
+        * platform/graphics/BitmapImage.cpp:
+        (WebCore::BitmapImage::startAnimation): Bitmap animation is now based
+        on monotonicallyIncreasingTime instead of currentTime
+
+2011-07-28  Luke Zarko  <lukezarko@gmail.com>
+
+        V8 should correctly serialize Boolean, Number and String objects.
+
+        https://bugs.webkit.org/show_bug.cgi?id=65286
+
+        Reviewed by David Levin.
+        
+        New APIs were exposed to allow V8 to correctly serialize Boolean, Number and String objects, as well as detect certain native errors as required by the HTML5 Structured Clone algorithm (http://www.whatwg.org/specs/web-apps/current-work/multipage/urls.html#safe-passing-of-structured-data). SerializedScriptValue should make use of these APIs.
+
+        - Checks for and serializes Boolean, Number and String objects.
+        - Checks for native errors and aborts should a script attempt to serialize them.
+        - Small name change to clear up the code: m_objectReferenceStack => m_openCompositeReferenceStack
+
+        Tests: fast/dom/Window/window-postmessage-clone.html
+               fast/loader/stateobjects/pushstate-object-types.html
+
+        * bindings/v8/SerializedScriptValue.cpp:
+        (WebCore::V8ObjectMap::Writer::writeBooleanObject):
+        (WebCore::V8ObjectMap::Writer::writeStringObject):
+        (WebCore::V8ObjectMap::Writer::writeNumberObject):
+        (WebCore::V8ObjectMap::Serializer::writeStringObject):
+        (WebCore::V8ObjectMap::Serializer::writeNumberObject):
+        (WebCore::V8ObjectMap::Serializer::writeBooleanObject):
+        (WebCore::V8ObjectMap::Serializer::doSerialize):
+        (WebCore::V8ObjectMap::Reader::read):
+        (WebCore::V8ObjectMap::Reader::readStringObject):
+        (WebCore::V8ObjectMap::Reader::readNumberObject):
+        (WebCore::V8ObjectMap::Deserializer::deserialize):
+        (WebCore::V8ObjectMap::Deserializer::openComposite):
+        (WebCore::V8ObjectMap::Deserializer::closeComposite):
+
+2011-07-28  Adam Barth  <abarth@webkit.org>
+
+        Old code about empty security origins could use a bath
+        https://bugs.webkit.org/show_bug.cgi?id=64735
+
+        Reviewed by Dimitri Glazkov.
+
+        This patch cleans up some old code related to empty security origins.
+        It also removes some dodgy code that seems wrong.
+
+        Test: http/tests/security/inactive-document-with-empty-security-origin.html
+
+        * bindings/generic/BindingSecurityBase.cpp:
+        (WebCore::BindingSecurityBase::canAccess):
+        * page/SecurityOrigin.cpp:
+        (WebCore::SecurityOrigin::isEmpty):
+        (WebCore::SecurityOrigin::isSecureTransitionTo):
+        (WebCore::SecurityOrigin::toString):
+
+2011-07-28  Vsevolod Vlasov  <vsevik@chromium.org>
+
+        Web Inspector: [REGRESSION] Inspected tab crashes if navigated with inspector open and there are watch expressions added.
+        https://bugs.webkit.org/show_bug.cgi?id=65322
+
+        Reviewed by Pavel Feldman.
+
+        * inspector/InspectorController.cpp:
+        * inspector/InspectorRuntimeAgent.cpp:
+        (WebCore::InspectorRuntimeAgent::evaluate):
+        * inspector/InspectorRuntimeAgent.h:
+        * inspector/WorkerInspectorController.cpp:
+
+2011-07-28  Mihnea Ovidenie  <mihnea@adobe.com>
+
+        [CSSRegions]Add basic RenderRegion support
+        https://bugs.webkit.org/show_bug.cgi?id=64689
+
+        Reviewed by David Hyatt.
+
+        This patch introduces the RenderRegion object.
+        A RenderObject that takes its content from a "named" flow will become a RenderRegion, an element that is used to display the content from a RenderFlowThread.
+        A RenderRegion that is marked to take its content from a non existing flow, will have its content disconnected from the normal flow.
+
+        Tests: fast/regions/region-element-display-restriction.html
+               fast/regions/region-element-dynamic-attach-flow.html
+               fast/regions/region-element-dynamic-detach-flow.html
+               fast/regions/render-region-renderer.html
+
+        * WebCore.vcproj/WebCore.vcproj:
+        * WebCore.xcodeproj/project.pbxproj:
+        * dom/Node.cpp:
+        (WebCore::Node::diff):
+        * rendering/RenderObject.cpp:
+        (WebCore::RenderObject::createObject):
+        * rendering/RenderObject.h:
+        (WebCore::RenderObject::isRenderRegion):
+        * rendering/RenderRegion.cpp: Added.
+        (WebCore::RenderRegion::RenderRegion):
+        (WebCore::RenderRegion::~RenderRegion):
+        (WebCore::RenderRegion::layout):
+        (WebCore::RenderRegion::paint):
+        * rendering/RenderRegion.h: Added.
+        (WebCore::RenderRegion::isRenderRegion):
+        (WebCore::RenderRegion::renderName):
+        (WebCore::toRenderRegion):
+        * rendering/style/RenderStyle.cpp:
+        (WebCore::RenderStyle::diff):
+
+2011-07-28  Marco Peereboom  <marco@peereboom.us>
+
+        [Soup] Cannot override default max-conns and max-conns-per-host Soup Session settings
+        https://bugs.webkit.org/show_bug.cgi?id=64355
+        Default max-conns and max-conns-per-host are set at "first contact" with
+        a site instead of at creation time.  This results in values being
+        overwritten if they are set prior to said "first contact"; which is the
+        most likely (or only) scenario.
+
+        Reviewed by Martin Robinson.
+
+        No new tests.  Rigged libsoup and xxxterm web browser to diagnose the
+        issue and validate the patch.
+
+        * platform/network/soup/ResourceHandleSoup.cpp:
+        (WebCore::ensureSessionIsInitialized): No longer ininitalize connection limits.
+        (WebCore::ResourceHandle::defaultSession): Initialize connection limits here instead.
+
+2011-07-28  Brady Eidson  <beidson@apple.com>
+
+        https://bugs.webkit.org/show_bug.cgi?id=65323
+        r91931 causes NOTREACHED to be hit via StorageTracker
+
+        Change the meaning of the "has been initialized" flag to "needs initialization", and only set it to true
+        if the ::initializeTracker() method has been called.
+
+        Reviewed by Sam Weinig.
+
+        * storage/StorageTracker.cpp:
+        (WebCore::StorageTracker::initializeTracker): Set m_needsInitialization to true since the calling WebKit port expects full
+          initialization instead of a dummy tracker.
+        (WebCore::StorageTracker::internalInitialize):
+        (WebCore::StorageTracker::tracker): Only initialize the tracker if it was created in the above initializeTracker().
+        (WebCore::StorageTracker::StorageTracker):
+        * storage/StorageTracker.h:
+
+2011-07-28  David Kilzer  <ddkilzer@apple.com>
+
+        <http://webkit.org/b/65289> Remove GeolocationPositionCache
+
+        Reviewed by Adam Barth.
+
+        * CMakeLists.txt: Remove references to GeolocationPositionCache.
+        * GNUmakefile.list.am: Ditto.
+        * WebCore.gypi: Ditto.
+        * WebCore.order: Ditto.
+        * WebCore.pro: Ditto.
+        * WebCore.vcproj/WebCore.vcproj: Ditto.
+        * WebCore.xcodeproj/project.pbxproj: Ditto.
+
+        * page/Geolocation.cpp: Switch from using m_positionCache to
+        m_cachedPosition.
+        (WebCore::Geolocation::makeCachedPositionCallbacks):
+        (WebCore::Geolocation::haveSuitableCachedPosition):
+        (WebCore::Geolocation::positionChangedInternal):
+        * page/Geolocation.h: Remove PositionCacheWrapper and replace
+        with RefPtr<Geoposition>.
+        * page/GeolocationPositionCache.cpp: Removed.
+        * page/GeolocationPositionCache.h: Removed.
+
+2011-07-28  Dan Bernstein  <mitz@apple.com>
+
+        <rdar://problem/9589433> Displaying Japanese dictionary contents in vertical orientation takes a couple of seconds
+
+        Reviewed by Darin Adler.
+
+        * WebCore.exp.in: Exported wkGetVerticalGlyphsForCharacters.
+        * platform/graphics/mac/GlyphPageTreeNodeMac.cpp:
+        (WebCore::GlyphPage::fill): Use wkGetVerticalGlyphsForCharacters. If it returns false, proceed
+        with the existing, slower method of getting vertical glyphs.
+        * platform/mac/WebCoreSystemInterface.h:
+        * platform/mac/WebCoreSystemInterface.mm:
+
+2011-07-28  Brady Eidson  <beidson@apple.com>
+
+        <rdar://problem/9714337> and https://bugs.webkit.org/show_bug.cgi?id=65306
+        WebKitInitializeStorageIfNecessary() can take awhile performing i/o, isn't necessary for every WebView
+
+        Move the heavy lifting done in StorageTracker::initializeTracker() until when the global tracker is actually
+        accessed, therefore deferring it until a web page actually uses LocalStorage or the app uses the API.
+
+        Reviewed by Maciej Stachowiak.
+
+        No new tests. (Not possible to test this API implementation detail)
+
+        * WebCore.exp.in:
+
+        * storage/StorageAreaImpl.cpp:
+        (WebCore::StorageAreaImpl::StorageAreaImpl): Access the global StorageTracker to indicate that a web page
+          is actually using the storage APIs.
+
+        * storage/StorageTracker.cpp:
+        (WebCore::StorageTracker::initializeTracker): Moved the potentially hefty work from here...
+        (WebCore::StorageTracker::internalInitialize): ...to here.
+        (WebCore::StorageTracker::tracker): If the global tracker hasn't had internalInitialize() called, do so.
+        (WebCore::StorageTracker::StorageTracker):
+        * storage/StorageTracker.h:
+
+2011-07-28  Carlos Garcia Campos  <cgarcia@igalia.com>
+
+        [GTK] Copy and paste is broken in WebKit2
+        https://bugs.webkit.org/show_bug.cgi?id=65252
+
+        Reviewed by Martin Robinson.
+
+        Use gtk_clipboard_get_for_display() instead of
+        gtk_widget_get_clipboard(), using the the default display when
+        there's no page client widget, which is the case of WebKit2.
+
+        * platform/gtk/PasteboardHelper.cpp:
+        (WebCore::displayFromFrame): Return the display of the current
+        frame widget or the default display if there's no widget.
+        (WebCore::PasteboardHelper::getClipboard):
+        (WebCore::PasteboardHelper::getPrimarySelectionClipboard):
+
+2011-07-28  Vsevolod Vlasov  <vsevik@chromium.org>
+
+        Web Inspector: Add resource initiator column to network panel.
+        https://bugs.webkit.org/show_bug.cgi?id=65105
+
+        Reviewed by Pavel Feldman.
+
+        Test: http/tests/inspector/network/network-initiator.html
+
+        * English.lproj/localizedStrings.js:
+        * dom/Document.cpp:
+        (WebCore::Document::scheduleStyleRecalc):
+        * inspector/Inspector.json:
+        * inspector/InspectorInstrumentation.cpp:
+        (WebCore::InspectorInstrumentation::willRecalculateStyleImpl):
+        (WebCore::InspectorInstrumentation::didRecalculateStyleImpl):
+        (WebCore::InspectorInstrumentation::didScheduleStyleRecalculationImpl):
+        * inspector/InspectorInstrumentation.h:
+        (WebCore::InspectorInstrumentation::didScheduleStyleRecalculation):
+        * inspector/InspectorResourceAgent.cpp:
+        (WebCore::InspectorResourceAgent::willSendRequest):
+        (WebCore::InspectorResourceAgent::didLoadResourceFromMemoryCache):
+        (WebCore::InspectorResourceAgent::willRecalculateStyle):
+        (WebCore::InspectorResourceAgent::didRecalculateStyle):
+        (WebCore::InspectorResourceAgent::didScheduleStyleRecalculation):
+        (WebCore::InspectorResourceAgent::buildInitiatorObject):
+        (WebCore::InspectorResourceAgent::InspectorResourceAgent):
+        * inspector/InspectorResourceAgent.h:
+        * inspector/front-end/NetworkManager.js:
+        (WebInspector.NetworkDispatcher.prototype.requestWillBeSent):
+        (WebInspector.NetworkDispatcher.prototype.resourceLoadedFromMemoryCache):
+        (WebInspector.NetworkDispatcher.prototype._appendRedirect):
+        (WebInspector.NetworkDispatcher.prototype._createResource):
+        * inspector/front-end/NetworkPanel.js:
+        (WebInspector.NetworkLogView.prototype._createTable):
+        (WebInspector.NetworkLogView.prototype._createSortingFunctions):
+        (WebInspector.NetworkLogView.prototype.switchToDetailedView):
+        (WebInspector.NetworkLogView.prototype.switchToBriefView):
+        (WebInspector.NetworkLogView.prototype._toggleGridMode):
+        (WebInspector.NetworkLogView.prototype._toggleViewingResourceMode):
+        (WebInspector.NetworkDataGridNode.prototype.createCells):
+        (WebInspector.NetworkDataGridNode.prototype.refreshResource):
+        (WebInspector.NetworkDataGridNode.prototype._refreshInitiatorCell):
+        (WebInspector.NetworkDataGridNode.InitiatorComparator):
+        * inspector/front-end/networkLogView.css:
+        (.initiator-column a):
+
+2011-07-28  Rob Buis  <rbuis@rim.com>
+
+        Use styling test from ietestcenter fails
+        https://bugs.webkit.org/show_bug.cgi?id=62147 
+
+        Reviewed by Nikolas Zimmermann.
+
+        Make sure CSS selectors are applied to the DOM tree referenced by <use>, not the internal shadow tree. In order to quickly
+        find the corresponding DOM tree element store this info in SVGElementRareData. 
+
+        Test: svg/W3C-SVG-1.1-SE/struct-use-11-f.svg
+
+        * rendering/svg/SVGShadowTreeElements.cpp:
+        (WebCore::SVGShadowTreeContainerElement::styleForRenderer):
+        * rendering/svg/SVGShadowTreeElements.h:
+        * svg/SVGElement.cpp:
+        (WebCore::SVGElement::correspondingElement):
+        (WebCore::SVGElement::setCorrespondingElement):
+        (WebCore::SVGElement::styleForRenderer):
+        * svg/SVGElement.h:
+        * svg/SVGElementInstance.cpp:
+        (WebCore::SVGElementInstance::invalidateAllInstancesOfElement):
+        * svg/SVGElementRareData.h:
+        (WebCore::SVGElementRareData::SVGElementRareData):
+        (WebCore::SVGElementRareData::correspondingElement):
+        (WebCore::SVGElementRareData::setCorrespondingElement):
+        * svg/SVGStyledElement.cpp:
+        (WebCore::SVGStyledElement::removedFromDocument):
+        * svg/SVGUseElement.cpp:
+        (WebCore::SVGUseElement::associateInstancesWithShadowTreeElements):
+        * svg/SVGUseElement.h:
+
+2011-07-28  Denis Oliver Kropp  <dok@directfb.org>
+
+        This fixes build without video enabled.
+        https://bugs.webkit.org/show_bug.cgi?id=65084
+
+        Reviewed by Philippe Normand.
+
+        Test with --disable-video.
+
+        * dom/EventDispatcher.cpp:
+        (WebCore::EventDispatcher::determineDispatchBehavior):
+
+2011-07-28  Yuta Kitamura  <yutak@chromium.org>
+
+        WebSocket: Pass the value of useHixie76Protocol flag to WebSocket object
+        https://bugs.webkit.org/show_bug.cgi?id=65250
+
+        Reviewed by Alexey Proskuryakov.
+
+        Add useHixie76Protocol() method to WebSocketChannel and its family. To implement hybi-specific
+        attributes in WebSocket object, WebSocket class needs to be able to get the value of
+        useHixie76Protocol flag of WebSocketChannel.
+
+        If the WebSocket object is created in a worker thread, the flag value must be obtained from
+        WebSocketChannel which resides in the loader thread (through WorkerThreadableWebSocketChannel).
+        Since the value does not change after creation of WebSocketChannel, it can be cached in
+        the worker thread.
+
+        There is no change in behavior, thus no new tests.
+
+        * websockets/ThreadableWebSocketChannel.h:
+        * websockets/ThreadableWebSocketChannelClientWrapper.cpp:
+        (WebCore::ThreadableWebSocketChannelClientWrapper::ThreadableWebSocketChannelClientWrapper):
+        (WebCore::ThreadableWebSocketChannelClientWrapper::useHixie76Protocol):
+        (WebCore::ThreadableWebSocketChannelClientWrapper::setUseHixie76Protocol):
+        * websockets/ThreadableWebSocketChannelClientWrapper.h:
+        * websockets/WebSocketChannel.cpp:
+        (WebCore::WebSocketChannel::useHixie76Protocol):
+        * websockets/WebSocketChannel.h:
+        * websockets/WorkerThreadableWebSocketChannel.cpp:
+        (WebCore::WorkerThreadableWebSocketChannel::useHixie76Protocol):
+        (WebCore::WorkerThreadableWebSocketChannel::Peer::useHixie76Protocol):
+        (WebCore::WorkerThreadableWebSocketChannel::Bridge::setWebSocketChannel):
+        (WebCore::WorkerThreadableWebSocketChannel::Bridge::mainThreadCreateWebSocketChannel):
+        * websockets/WorkerThreadableWebSocketChannel.h:
+
+2011-07-28  Rob Buis  <rbuis@rim.com>
+
+        REGRESSION (r91125): Google Drawings is broken
+        https://bugs.webkit.org/show_bug.cgi?id=65257
+
+        Reviewed by Darin Adler.
+
+        Only consider zero-length path rendering code path when a stroke is defined.
+
+        Test: svg/custom/zero-path-square-cap-rendering2.svg
+
+        * rendering/svg/RenderSVGPath.cpp:
+        (WebCore::RenderSVGPath::shouldStrokeZeroLengthSubpath):
+
+2011-07-22  Martin Robinson  <mrobinson@igalia.com>
+
+        [Cairo] Switch from ContextShadow to ShadowBlur
+        https://bugs.webkit.org/show_bug.cgi?id=64744
+
+        Use ShadowBlur in the Cairo backend instead of ContextShadow. This allows us
+        to share shadowing code with Qt and Mac ports and to correct some broken
+        shadow rendering.
+
+        Reviewed by Dirk Schulze.
+
+        * CMakeLists.txt: Remove ContextShadow from the build.
+        * CMakeListsEfl.txt: Ditto.
+        * GNUmakefile.list.am: Add ShadowBlur source files and remove ContextShadow
+        source files.
+        * platform/graphics/GraphicsContext.cpp:Add #ifdefs to support ShadowBlur for Cairo.
+        * platform/graphics/GraphicsContext.h: Remove Cairo ContextShadow code.
+        * platform/graphics/ShadowBlur.cpp:
+        (WebCore::ShadowBlur::drawInsetShadowWithTiling): Since the ShadowBlur is a property
+        of the GraphicsContext, we cannot clear the GraphicsContext shadow until we have
+        finished using properties like m_offset. If we clear the GrahpicsContext shadow
+        before using these properties, they will be zero when we try to use them.
+        (WebCore::ShadowBlur::drawRectShadowWithTiling):Ditto.
+        (WebCore::ShadowBlur::drawLayerPieces): Ditto.
+        (WebCore::ShadowBlur::beginShadowLayer):Cairo is the first port to keep ShadowBlur
+        as a persistent property of GraphicsContext and use drawRectShadow and drawInsetShadow.
+        Thus, we must manually clear the cached tiling values so that ShadowBlur does not
+        try to reuse the scratch buffer for rectangular shadows after using beginShadowLayer
+        and endShadowLayer.
+        (WebCore::ShadowBlur::mustUseShadowBlur): Moved this method from the Qt port to
+        this cross-platform location.
+        * platform/graphics/ShadowBlur.h: Added new method declaration.
+        * platform/graphics/cairo/ContextShadowCairo.cpp: Removed.
+        * platform/graphics/cairo/FontCairo.cpp: Switched to using ShadowBlur.
+        (WebCore::drawGlyphsShadow):Ditto.
+        * platform/graphics/cairo/GraphicsContextCairo.cpp: Switch to using ShadowBlur.
+        (WebCore::drawPathShadow): ShadowBlur has slightly different semantics than
+        ContextShadow. When filling the shadow layer, we do not need to use the fill
+        alpha. We also need to restore the Cairo path to the target context after
+        endShadowLayer as it destroys the current path.
+        * platform/graphics/cairo/GraphicsContextPlatformPrivateCairo.h: Switch to using ShadowBlur.
+        * platform/graphics/cairo/ImageCairo.cpp: Ditto.
+        * platform/graphics/cairo/PlatformContextCairo.cpp:
+        (WebCore::PlatformContextCairo::drawSurfaceToContext):Ditto.
+        (WebCore::PlatformContextCairo::prepareForStroking): Add a mode ignoring alpha.
+        * platform/graphics/cairo/PlatformContextCairo.h: Ditto.
+        (WebCore::PlatformContextCairo::shadowBlur):Added.
+        * platform/graphics/gtk/FontGtk.cpp: Update to use ShadowBlur.
+        * platform/graphics/qt/GraphicsContextQt.cpp: Switch to using the new version of mustUseShadowBlur.
+
+2011-07-27  Gyuyoung Kim  <gyuyoung.kim@samsung.com>
+
+        [EFL] Add dummy NotificationPresenterClientEfl
+        https://bugs.webkit.org/show_bug.cgi?id=64064
+
+        Add two files to CMakeLists.txt for HTML5 Notification.
+
+        Reviewed by Antonio Gomes.
+
+        * CMakeLists.txt:
+
+2011-07-27  Ryosuke Niwa  <rniwa@webkit.org>
+
+        Calling window.find immediately after mutating the document crashes WebKit.
+        https://bugs.webkit.org/show_bug.cgi?id=65296
+
+        Reviewed by Darin Adler.
+
+        Don't forget to layout first.
+
+        Test: editing/text-iterator/find-after-mutation.html
+
+        * editing/TextIterator.cpp:
+        (WebCore::findPlainText):
+
+2011-07-27  Ben Wells  <benwells@chromium.org>
+
+        Remove skia special case for outline rendering code
+        https://bugs.webkit.org/show_bug.cgi?id=65295
+
+        Reviewed by James Robinson.
+
+        The fix for bug 58999 (outlines with alpha channels showed artifacts in the corners) was
+        excluded from skia builds until bug 61369 (skia drawConvexPoly didn't pay attention to
+        shouldAntialias) was fixed. That bug is fixed so now the #if's can be removed.
+
+        * rendering/RenderInline.cpp:
+        (WebCore::RenderInline::paintOutline):
+        * rendering/RenderObject.cpp:
+        (WebCore::RenderObject::paintOutline):
+
+2011-07-27  Adam Barth  <abarth@webkit.org>
+
+        Crypto.idl doesn't need legacy optional arguments
+        https://bugs.webkit.org/show_bug.cgi?id=65298
+
+        Reviewed by Darin Adler.
+
+        This API is relatively new and useless to call without its only argument.
+
+        * page/Crypto.idl:
+
+2011-07-27  Mark Hahnenberg  <mhahnenberg@apple.com>
+
+        Remove operator new from JSCell
+        https://bugs.webkit.org/show_bug.cgi?id=64999
+
+        Reviewed by Oliver Hunt.
+
+        No new tests.
+
+        Removed the implementation of operator new in JSCell, so any further uses
+        will not successfully link.  Also removed any remaining uses of operator new.
+
+        * bridge/c/CRuntimeObject.h:
+        (JSC::Bindings::CRuntimeObject::create):
+        * bridge/c/c_instance.cpp:
+        (JSC::Bindings::CInstance::newRuntimeObject):
+        (JSC::Bindings::CRuntimeMethod::create):
+        (JSC::Bindings::CRuntimeMethod::CRuntimeMethod):
+        (JSC::Bindings::CInstance::getMethod):
+        * bridge/jni/jsc/JavaInstanceJSC.cpp:
+        (JavaInstance::newRuntimeObject):
+        (JavaRuntimeMethod::create):
+        (JavaRuntimeMethod::JavaRuntimeMethod):
+        (JavaInstance::getMethod):
+        * bridge/jni/jsc/JavaRuntimeObject.h:
+        (JSC::Bindings::JavaRuntimeObject::create):
+        * bridge/objc/ObjCRuntimeObject.h:
+        (JSC::Bindings::ObjCRuntimeObject::create):
+        * bridge/objc/objc_class.mm:
+        (JSC::Bindings::ObjcClass::fallbackObject):
+        * bridge/objc/objc_instance.mm:
+        (ObjcInstance::newRuntimeObject):
+        (ObjCRuntimeMethod::create):
+        (ObjCRuntimeMethod::ObjCRuntimeMethod):
+        (ObjcInstance::getMethod):
+        * bridge/objc/objc_runtime.h:
+        (JSC::Bindings::ObjcFallbackObjectImp::create):
+
+2011-07-27  Vsevolod Vlasov  <vsevik@chromium.org>
+
+        Web Inspector: Network panel sidebar should have width saved in preferences when resource is selected.
+        https://bugs.webkit.org/show_bug.cgi?id=65256
+
+        Reviewed by Pavel Feldman.
+
+        * inspector/front-end/NetworkPanel.js:
+        (WebInspector.NetworkLogView.prototype._toggleViewingResourceMode):
+        (WebInspector.NetworkPanel.prototype.restoreSidebarWidth):
+        (WebInspector.NetworkPanel.prototype._showResource):
+        (WebInspector.NetworkPanel.prototype._closeVisibleResource):
+        (WebInspector.NetworkPanel.prototype._toggleViewingResourceMode):
+        * inspector/front-end/Panel.js:
+        (WebInspector.Panel.prototype.show):
+        (WebInspector.Panel.prototype.preferredSidebarWidth):
+        (WebInspector.Panel.prototype.get restoreSidebarWidth):
+
+2011-07-27  Vsevolod Vlasov  <vsevik@chromium.org>
+
+        Web Inspector: [REGRESSION] [Chromium] Opening link in new tab does not work properly.
+        https://bugs.webkit.org/show_bug.cgi?id=65279
+
+        Reviewed by Pavel Feldman.
+
+        * inspector/InspectorPageAgent.cpp:
+        (WebCore::InspectorPageAgent::open):
+
+2011-07-27  Adam Klein  <adamk@chromium.org>
+
+        [V8] Remove unused m_isWeak member of V8AbstractEventListener
+        https://bugs.webkit.org/show_bug.cgi?id=65273
+
+        Reviewed by Adam Barth.
+
+        m_isWeak is set to true in the constructor and never changed,
+        so the one if statement that tests it always executes; the
+        code has been updated to make this clear.
+
+        No behavior change, thus no tests.
+
+        * bindings/v8/V8AbstractEventListener.cpp:
+        (WebCore::V8AbstractEventListener::V8AbstractEventListener):
+        (WebCore::V8AbstractEventListener::setListenerObject):
+        * bindings/v8/V8AbstractEventListener.h:
+
+2011-07-27  Fady Samuel  <fsamuel@chromium.org>
+
+        Popups on Chromium now check the minimum row height set through the Chromium WebKit API when
+        computing the height of a row in a popup listbox.
+        https://bugs.webkit.org/show_bug.cgi?id=64897
+
+        Reviewed by Darin Fisher.
+
+        No new tests.
+
+        * platform/chromium/PopupMenuChromium.cpp:
+        (WebCore::PopupListBox::getRowHeight):
+        * platform/chromium/PopupMenuChromium.h:
+        (WebCore::PopupMenuChromium::minimumRowHeight):
+        (WebCore::PopupMenuChromium::setMinimumRowHeight):
+
+2011-07-27  MORITA Hajime  <morrita@google.com>
+
+        Inconsistent state of TreeScope reference.
+        https://bugs.webkit.org/show_bug.cgi?id=65235
+        
+        The tree scope pointers on shadow tree nodes didn't cleared.
+        even when the tree scope (shadow root) is destroyed.
+        This change clear these poitners before detaching the shadow root.
+
+        Reviewed by Dimitri Glazkov.
+
+        Test: fast/dom/shadow/tree-scope-crash.html
+
+        * dom/Element.cpp:
+        (WebCore::Element::removeShadowRoot):
+
+2011-07-27  Rachel Blum  <groby@chromium.org>
+
+        Implement sizes attribute for link tag from HTML5
+        https://bugs.webkit.org/show_bug.cgi?id=37674
+
+        Reviewed by Dimitri Glazkov.
+
+        Test: fast/dom/icon-size-property.html
+
+        * WebCore.gypi:
+        * WebCore.pro:
+        * bindings/js/JSHTMLLinkElementCustom.cpp:
+        (WebCore::JSHTMLLinkElement::sizes):
+        (WebCore::JSHTMLLinkElement::setSizes):
+        * bindings/v8/custom/V8HTMLLinkElementCustom.cpp: Added.
+        (WebCore::V8HTMLLinkElement::sizesAccessorGetter):
+        (WebCore::V8HTMLLinkElement::sizesAccessorSetter):
+        * html/HTMLAttributeNames.in:
+        * html/HTMLLinkElement.cpp:
+        (WebCore::HTMLLinkElement::HTMLLinkElement):
+        (WebCore::HTMLLinkElement::parseMappedAttribute):
+        (WebCore::HTMLLinkElement::sizes):
+        (WebCore::HTMLLinkElement::setSizes):
+        * html/HTMLLinkElement.h:
+        * html/HTMLLinkElement.idl:
+
+2011-07-27  Pratik Solanki  <psolanki@apple.com>
+
+        Incorrect arguments passed to LOG statement
+        https://bugs.webkit.org/show_bug.cgi?id=65293
+
+        Reviewed by Oliver Hunt.
+
+        * platform/network/mac/ResourceHandleMac.mm:
+        (-[WebCoreResourceHandleAsDelegate connection:canAuthenticateAgainstProtectionSpace:]):
+
+2011-07-27  Levi Weintraub  <leviw@chromium.org>
+
+        Switch transform operations to FloatSize
+        https://bugs.webkit.org/show_bug.cgi?id=64301
+
+        Reviewed by Simon Fraser.
+
+        Changing TransformOperation and its progeny to operate on FloatSizes instead of IntSizes.
+
+        * platform/graphics/transforms/IdentityTransformOperation.h:
+        (WebCore::IdentityTransformOperation::apply):
+        * platform/graphics/transforms/Matrix3DTransformOperation.cpp:
+        (WebCore::Matrix3DTransformOperation::blend):
+        * platform/graphics/transforms/Matrix3DTransformOperation.h:
+        (WebCore::Matrix3DTransformOperation::apply):
+        * platform/graphics/transforms/MatrixTransformOperation.cpp:
+        (WebCore::MatrixTransformOperation::blend):
+        * platform/graphics/transforms/MatrixTransformOperation.h:
+        (WebCore::MatrixTransformOperation::apply):
+        * platform/graphics/transforms/PerspectiveTransformOperation.h:
+        (WebCore::PerspectiveTransformOperation::apply):
+        * platform/graphics/transforms/RotateTransformOperation.h:
+        (WebCore::RotateTransformOperation::apply):
+        * platform/graphics/transforms/ScaleTransformOperation.h:
+        (WebCore::ScaleTransformOperation::apply):
+        * platform/graphics/transforms/SkewTransformOperation.h:
+        (WebCore::SkewTransformOperation::apply):
+        * platform/graphics/transforms/TransformOperation.h:
+        * platform/graphics/transforms/TransformOperations.h:
+        (WebCore::TransformOperations::apply):
+        * platform/graphics/transforms/TranslateTransformOperation.h:
+        (WebCore::TranslateTransformOperation::x):
+        (WebCore::TranslateTransformOperation::y):
+        (WebCore::TranslateTransformOperation::z):
+        (WebCore::TranslateTransformOperation::apply):
+
+2011-07-27  Levi Weintraub  <leviw@chromium.org>
+
+        unicode-bidi:-webkit-plaintext does not work on <textarea>
+        https://bugs.webkit.org/show_bug.cgi?id=65074
+
+        Reviewed by Ryosuke Niwa.
+
+        Fixing unicode-bidi style propagation into text control shadow trees.
+
+        Test: fast/text/international/unicode-bidi-plaintext-in-textarea.html
+
+        * rendering/RenderTextControl.cpp:
+        (WebCore::RenderTextControl::adjustInnerTextStyle):
+
+2011-07-27  Eric Carlson  <eric.carlson@apple.com>
+
+        Load delegate not consulted before loading some poster images
+        https://bugs.webkit.org/show_bug.cgi?id=65270
+
+        Reviewed by Darin Adler.
+
+        Test: media/video-poster-blocked-by-willsendrequest.html
+
+        * html/HTMLVideoElement.cpp:
+        (WebCore::HTMLVideoElement::setDisplayMode): Don't ask media engine to set poster if
+            willLoadMediaElementURL returns false.
+
+2011-07-27  Stephen White  <senorblanco@chromium.org>
+
+        Fix for printing with accelerated <canvas>
+        https://bugs.webkit.org/show_bug.cgi?id=62406
+
+        Reviewed by James Robinson.
+
+        The platform-independent side of this should be covered by existing
+        tests.  Printing itself in Chrome has few tests, sadly.  :(
+
+        * html/HTMLCanvasElement.cpp:
+        (WebCore::HTMLCanvasElement::paint):
+        * platform/graphics/skia/ImageBufferSkia.cpp:
+        (WebCore::ImageBuffer::draw):
+
+2011-07-25  Mihai Parparita  <mihaip@chromium.org>
+
+        [Chromium] Add better WebKit API for chrome.tabs.insertCSS extension API
+        https://bugs.webkit.org/show_bug.cgi?id=65158
+
+        Reviewed by David Hyatt.
+
+        Add per-Document instance user stylesheets (as opposed to the page 
+        group user styles and the global page stylesheet).
+
+        * css/CSSStyleSelector.cpp:
+        (WebCore::CSSStyleSelector::CSSStyleSelector):
+        * css/CSSStyleSelector.h:
+        * dom/Document.cpp:
+        (WebCore::Document::~Document):
+        (WebCore::Document::createStyleSelector):
+        (WebCore::Document::addUserSheet):
+        * dom/Document.h:
+
+2011-07-27  Vsevolod Vlasov  <vsevik@chromium.org>
+
+        Web Inspector: Disable cache option should only clear memory cache, not disable it.
+        https://bugs.webkit.org/show_bug.cgi?id=65184
+
+        Reviewed by Pavel Feldman.
+
+        * inspector/InspectorClient.h:
+        * inspector/InspectorResourceAgent.cpp:
+        (WebCore::InspectorResourceAgent::enable):
+        (WebCore::InspectorResourceAgent::disable):
+        (WebCore::InspectorResourceAgent::setCacheDisabled):
+        (WebCore::InspectorResourceAgent::mainFrameNavigated):
+
+2011-07-27  Rob Buis  <rbuis@rim.com>
+
+        Implement getIntersectionList(), getEnclosureList(), checkIntersection() and checkEnclosure() in SVGSVGElement
+        https://bugs.webkit.org/show_bug.cgi?id=11274
+
+        Reviewed by Nikolas Zimmermann.
+
+        Implement checkIntersection/checkEnclosure and use it to implement getIntersectionList and getEnclosureList as well.
+        The referenceElement is used to provide a DOM subtree to find matches in. Also we do not allow elements that specify
+        pointer-events=none in the list.
+
+        Tests: svg/W3C-SVG-1.1-SE/struct-dom-11-f.svg
+               svg/custom/intersection-list-clipping.svg
+               svg/custom/intersection-list-nested-svg.svg
+
+        * rendering/svg/RenderSVGModelObject.cpp:
+        (WebCore::getElementCTM):
+        (WebCore::intersectsAllowingEmpty):
+        (WebCore::isGraphicsElement):
+        (WebCore::RenderSVGModelObject::checkIntersection):
+        (WebCore::RenderSVGModelObject::checkEnclosure):
+        * rendering/svg/RenderSVGModelObject.h:
+        * svg/SVGSVGElement.cpp:
+        (WebCore::SVGSVGElement::checkIntersection):
+        (WebCore::SVGSVGElement::checkEnclosure):
+
+2011-07-27  Becsi Andras  <abecsi@webkit.org>
+
+        [Qt][V8] Fix the build.
+
+        Unreviewed build fix.
+
+        No new tests needed.
+
+        * platform/graphics/gstreamer/MediaPlayerPrivateGStreamer.cpp: Add missing CString.h include.
+
+2011-07-27  Alexis Menard  <alexis.menard@openbossa.org>
+
+        [Qt] Unreviewed build fix for mac.
+
+        QtKit is now our default media player, the define is WTF_USE_QTKIT and it's not part
+        of the options passed to build-webkit, therefore DerivedSources should now generate the
+        includes when it's mac.
+
+        * DerivedSources.pro:
+        * WebCore.pro:
+
+2011-07-27  Yury Semikhatsky  <yurys@chromium.org>
+
+        Inspector should support cd(window) in the command line
+        https://bugs.webkit.org/show_bug.cgi?id=19872
+
+        Added dropdown list with all iframes to allow selecting current evaluation context for console expressions.
+
+        Reviewed by Pavel Feldman.
+
+        Test: http/tests/inspector/console-cd.html
+
+        * WebCore.gypi:
+        * inspector/Inspector.json:
+        * inspector/InspectorController.cpp:
+        (WebCore::InspectorController::InspectorController):
+        * inspector/InspectorRuntimeAgent.cpp:
+        (WebCore::InspectorRuntimeAgent::InspectorRuntimeAgent):
+        (WebCore::InspectorRuntimeAgent::evaluate):
+        * inspector/InspectorRuntimeAgent.h:
+        * inspector/WorkerInspectorController.cpp:
+        * inspector/front-end/ConsoleView.js:
+        (WebInspector.ConsoleView.prototype.addContext):
+        (WebInspector.ConsoleView.prototype.removeContext):
+        (WebInspector.ConsoleView.prototype._contextUpdated):
+        (WebInspector.ConsoleView.prototype.get _currentEvaluationContextId):
+        (WebInspector.ConsoleView.prototype.evalInInspectedWindow):
+        * inspector/front-end/ContextManager.js: Added.
+        (WebInspector.ContextManager):
+        (WebInspector.ContextManager.prototype._frameAdded):
+        (WebInspector.ContextManager.prototype._frameNavigated):
+        (WebInspector.ContextManager.prototype._frameDetached):
+        (WebInspector.FrameEvaluationContext):
+        (WebInspector.FrameEvaluationContext.prototype._frameNavigated):
+        (WebInspector.FrameEvaluationContext.prototype.get id):
+        (WebInspector.FrameEvaluationContext.prototype.get url):
+        (WebInspector.FrameEvaluationContext.prototype.get displayName):
+        * inspector/front-end/ResourceTreeModel.js:
+        (WebInspector.ResourceTreeModel.prototype._cleanupFramesAfterNavigation):
+        (WebInspector.ResourceTreeModel.prototype._addFramesRecursively):
+        * inspector/front-end/WebKit.qrc:
+        * inspector/front-end/inspector.html:
+        * inspector/front-end/inspector.js:
+
+2011-07-27  Shinya Kawanaka  <shinyak@google.com>
+
+        Uses isHTMLSpace to normalize white spaces.
+        https://bugs.webkit.org/show_bug.cgi?id=57746
+
+        Reviewed by Kent Tamura.
+
+        Test: fast/forms/option-strip-unicode-spaces.html
+
+        * dom/OptionElement.cpp:
+        (WebCore::OptionElement::normalizeText):
+          Uses isHTMLSpace to trim and replace white spaces.
+
+2011-05-15  Holger Hans Peter Freyther  <holger@moiji-mobile.com>
+
+        [chromium] Remove include of skia/ext/platform_canvas.h
+        https://bugs.webkit.org/show_bug.cgi?id=60852
+
+        Reviewed by Hajime Morita.
+
+        In https://bugs.webkit.org/show_bug.cgi?id=57563 the usage of the
+        skia::PlatformCanvas was eliminated in favor of directly using
+        SkCanvas directly. The include of platform_canvas.h was not removed
+        leaving the dependency on Chromium in the header files. Remove
+        that dependency now.
+
+        * platform/graphics/skia/PlatformContextSkia.h: Remove platform_canvas.h
+
+2011-07-27  Mikhail Naganov  <mnaganov@chromium.org>
+
+        Web Inspector: [Chromium] REGRESSION: Uncaught TypeError: Cannot read property 'isTracingToWindowObjects' of undefined
+        https://bugs.webkit.org/show_bug.cgi?id=65213
+
+        Reviewed by Pavel Feldman.
+
+        * inspector/front-end/DetailedHeapshotView.js:
+        (WebInspector.HeapSnapshotRetainingPathsList.prototype.refresh):
+
+2011-07-27  Shinya Kawanaka  <shinyak@google.com>
+
+        Knob of a disabled or readonly range control should not be draggable.
+        https://bugs.webkit.org/show_bug.cgi?id=54820
+
+        Reviewed by Kent Tamura.
+
+        Made disabled or readonly range control undraggable.
+
+        Test: fast/forms/range-drag.html
+
+        * html/RangeInputType.cpp:
+        (WebCore::RangeInputType::handleMouseDownEvent):
+          Added check that the element is readonly or disabled.
+        * html/shadow/SliderThumbElement.cpp:
+        (WebCore::SliderThumbElement::defaultEventHandler): ditto.
+
+2011-07-27  Yuta Kitamura  <yutak@chromium.org>
+
+        WebSocket: CloseEvent attribute is not available on WebWorkers in JSC
+        https://bugs.webkit.org/show_bug.cgi?id=65232
+
+        Reviewed by Kent Tamura.
+
+        Add [NoStaticTables] attribute to CloseEvent interface definition. This attribute
+        makes the code generator obtain the attributes table used for building ClassInfo
+        through JSGlobalData, instead of directly using a statically-allocated table.
+
+        Generally speaking, NoStaticTables needs to be specified in interfaces which
+        may be accessed from workers.
+
+        Tests: http/tests/websocket/tests/hybi/workers/shared-worker-simple.html (updated)
+               http/tests/websocket/tests/hybi/workers/worker-simple.html (updated)
+
+        * websockets/CloseEvent.idl: Fixed the formatting, too.
+
+2011-07-26  James Robinson  <jamesr@chromium.org>
+
+        [chromium] REGRESSION(90963): Content layers are not redrawn after losing the compositor context
+        https://bugs.webkit.org/show_bug.cgi?id=65224
+
+        Reviewed by Kenneth Russell.
+
+        There's no automated way to test lost compositor contexts (yet), but to test manually open up the poster circle
+        page and kill the GPU process.
+
+        * platform/graphics/chromium/ContentLayerChromium.cpp:
+        (WebCore::ContentLayerChromium::cleanupResources):
+        * platform/graphics/chromium/ContentLayerChromium.h:
+
+2011-07-26  Sheriff Bot  <webkit.review.bot@gmail.com>
+
+        Unreviewed, rolling out r91805.
+        http://trac.webkit.org/changeset/91805
+        https://bugs.webkit.org/show_bug.cgi?id=65226
+
+        Breaks @ symbols and changes other font rendering on Windows
+        (Requested by enne on #webkit).
+
+        * platform/graphics/chromium/FontChromiumWin.cpp:
+        (WebCore::TransparencyAwareFontPainter::TransparencyAwareFontPainter::TransparencyAwareFontPainter):
+        (WebCore::TransparencyAwareFontPainter::TransparencyAwareFontPainter::init):
+        (WebCore::TransparencyAwareFontPainter::TransparencyAwareFontPainter::initializeForGDI):
+        (WebCore::TransparencyAwareFontPainter::TransparencyAwareFontPainter::~TransparencyAwareFontPainter):
+        (WebCore::TransparencyAwareFontPainter::TransparencyAwareGlyphPainter::TransparencyAwareGlyphPainter):
+        (WebCore::TransparencyAwareFontPainter::TransparencyAwareGlyphPainter::~TransparencyAwareGlyphPainter):
+        (WebCore::TransparencyAwareFontPainter::TransparencyAwareGlyphPainter::drawGlyphs):
+        (WebCore::TransparencyAwareFontPainter::TransparencyAwareUniscribePainter::hdc):
+        (WebCore::TransparencyAwareFontPainter::TransparencyAwareUniscribePainter::TransparencyAwareUniscribePainter):
+        (WebCore::TransparencyAwareFontPainter::TransparencyAwareUniscribePainter::~TransparencyAwareUniscribePainter):
+        (WebCore::drawGlyphsWin):
+        (WebCore::Font::drawComplexText):
+        * platform/graphics/chromium/UniscribeHelper.cpp:
+        (WebCore::UniscribeHelper::draw):
+        * platform/graphics/skia/PlatformContextSkia.cpp:
+        (WebCore::PlatformContextSkia::isNativeFontRenderingAllowed):
+        * platform/graphics/skia/PlatformContextSkia.h:
+        * platform/graphics/skia/SkiaFontWin.cpp:
+        (WebCore::windowsCanHandleDrawTextShadow):
+        (WebCore::windowsCanHandleTextDrawing):
+        (WebCore::windowsCanHandleTextDrawingWithoutShadow):
+        * platform/graphics/skia/SkiaFontWin.h:
+
+2011-07-26  Adrienne Walker  <enne@google.com>
+
+        Unreviewed, rolling out r91812.
+        http://trac.webkit.org/changeset/91812
+        https://bugs.webkit.org/show_bug.cgi?id=65210
+
+        Breaks OSX GPU tests.
+
+        * platform/graphics/chromium/LayerRendererChromium.cpp:
+        (WebCore::LayerRendererChromium::drawLayers):
+
+2011-07-26  Sheriff Bot  <webkit.review.bot@gmail.com>
+
+        Unreviewed, rolling out r91809.
+        http://trac.webkit.org/changeset/91809
+        https://bugs.webkit.org/show_bug.cgi?id=65225
+
+        Does not build on Chromium Windows (Requested by abarth on
+        #webkit).
+
+        * dom/WheelEvent.cpp:
+        (WebCore::WheelEvent::WheelEvent):
+        (WebCore::WheelEvent::initWheelEvent):
+        * dom/WheelEvent.h:
+        * page/EventHandler.cpp:
+        (WebCore::EventHandler::EventHandler):
+        (WebCore::EventHandler::handleGestureEvent):
+        (WebCore::EventHandler::handleTouchEvent):
+        (WebCore::EventHandler::resetGestureRecognizer):
+        * page/EventHandler.h:
+        * page/FrameView.cpp:
+        (WebCore::FrameView::reset):
+        * platform/PlatformGestureEvent.h:
+        * platform/PlatformGestureRecognizer.h:
+        * platform/chromium/FramelessScrollView.h:
+        * platform/chromium/GestureRecognizerChromium.cpp:
+        (WebCore::InnerGestureRecognizer::InnerGestureRecognizer):
+        (WebCore::InnerGestureRecognizer::reset):
+        (WebCore::InnerGestureRecognizer::dispatchSyntheticClick):
+        (WebCore::InnerGestureRecognizer::processTouchEventForGesture):
+        (WebCore::InnerGestureRecognizer::scrollViaTouchMotion):
+        (WebCore::touchDown):
+        (WebCore::noGesture):
+        (WebCore::click):
+        (WebCore::isClickOrScroll):
+        (WebCore::inScroll):
+        * platform/chromium/GestureRecognizerChromium.h:
+        (WebCore::GestureRecognizerChromium::reset):
+        (WebCore::GestureRecognizerChromium::processTouchEventForGesture):
+        * platform/chromium/PopupMenuChromium.cpp:
+        * platform/chromium/PopupMenuChromium.h:
+        * platform/mac/ScrollAnimatorMac.mm:
+        (WebCore::ScrollAnimatorMac::handleGestureEvent):
+
+2011-07-26  Dmitry Lomov  <dslomov@google.com>
+
+        [V8][Chromium] Run workers in a separate v8::Isolate 
+        https://bugs.webkit.org/show_bug.cgi?id=65004
+        This patch allocates a new v8::Isolate for every worker and enters it on worker thread.
+
+        Reviewed by David Levin.
+
+        Covered by existing chromium tests.
+
+        * bindings/v8/DOMDataStore.cpp:
+        (WebCore::DOMDataStore::DOMDataStore):
+        (WebCore::DOMDataStore::~DOMDataStore):
+        * bindings/v8/StaticDOMDataStore.cpp:
+        (WebCore::StaticDOMDataStore::StaticDOMDataStore):
+        (WebCore::StaticDOMDataStore::~StaticDOMDataStore):
+        * bindings/v8/StaticDOMDataStore.h:
+        * bindings/v8/V8Binding.h:
+        (WebCore::V8BindingPerIsolateData::registerDOMDataStore):
+        (WebCore::V8BindingPerIsolateData::unregisterDOMDataStore):
+        * bindings/v8/V8DOMMap.cpp:
+        (WebCore::DOMDataStoreHandle::DOMDataStoreHandle):
+        (WebCore::DOMDataStoreHandle::~DOMDataStoreHandle):
+        * bindings/v8/WorkerContextExecutionProxy.cpp:
+        (WebCore::WorkerContextExecutionProxy::WorkerContextExecutionProxy):
+        (WebCore::WorkerContextExecutionProxy::initV8):
+        * bindings/v8/WorkerContextExecutionProxy.h:
+        * bindings/v8/WorkerScriptController.cpp:
+        (WebCore::WorkerScriptController::WorkerScriptController):
+        (WebCore::WorkerScriptController::~WorkerScriptController):
+        * bindings/v8/WorkerScriptController.h:
+
+2011-07-26  James Robinson  <jamesr@chromium.org>
+
+        [chromium] Avoid clearing the framebuffer when compositing in release builds
+        https://bugs.webkit.org/show_bug.cgi?id=65210
+
+        Reviewed by Kenneth Russell.
+
+        We clear the default framebuffer to blue when compositing so it's
+        easier to spot regions we miss. This is useful for debugging, but eats
+        bandwidth unnecessarily in release builds.
+
+        * platform/graphics/chromium/LayerRendererChromium.cpp:
+        (WebCore::LayerRendererChromium::drawLayers):
+
+2011-07-26  Jeffrey Pfau  <jpfau@apple.com>
+
+        New XML tokenizer
+        https://bugs.webkit.org/show_bug.cgi?id=64566
+
+        Reviewed by Adam Barth.
+
+        Add tokenizer for XML and tests in NewXMLDocumentParser for printing results of tokenization.
+
+        * GNUmakefile.list.am:
+        * WebCore.gypi:
+        * WebCore.pro:
+        * WebCore.vcproj/WebCore.vcproj:
+        * WebCore.xcodeproj/project.pbxproj:
+        * xml/parser/NewXMLDocumentParser.cpp:
+        (WebCore::NewXMLDocumentParser::NewXMLDocumentParser):
+        (WebCore::NewXMLDocumentParser::append):
+        * xml/parser/NewXMLDocumentParser.h:
+        * xml/parser/XMLToken.h:
+        * xml/parser/XMLTokenizer.cpp: Added.
+        (WebCore::XMLTokenizer::XMLTokenizer):
+        (WebCore::::shouldSkipNullCharacters):
+        (WebCore::XMLTokenizer::nextToken):
+        (WebCore::XMLTokenizer::bufferCharacter):
+        (WebCore::XMLTokenizer::parseError):
+        * xml/parser/XMLTokenizer.h: Added.
+        (WebCore::XMLTokenizer::create):
+        (WebCore::XMLTokenizer::gotError):
+        (WebCore::XMLTokenizer::shouldSkipNullCharacters):
+
+2011-07-26  Robert Kroeger  <rjkroege@chromium.org>
+
+        [chromium] Layering violations in gesture recognizer
+        https://bugs.webkit.org/show_bug.cgi?id=65044
+
+        Reviewed by Adam Barth.
+
+        Divided the gesture recognizer up to correct a layering
+        violation by moving gesture implementation from it to
+        EventHandler::handleGestureEvent so that the gesture recognizer
+        could simply be an engine for generating gesture events from
+        touch events.
+
+        * page/EventHandler.cpp:
+        (WebCore::EventHandler::EventHandler):
+        Removed construction of gesture recognizer.
+        (WebCore::EventHandler::handleGestureEvent):
+        Extended for new gesture events added in this patch.
+        (WebCore::EventHandler::handleTouchEvent):
+        Removed call into gesture recognizer.
+        * page/EventHandler.h:
+        * page/FrameView.cpp:
+        (WebCore::FrameView::reset):
+        Removed code to reset gesture recognizer.
+        * platform/PlatformGestureEvent.h:
+        (WebCore::PlatformGestureEvent::PlatformGestureEvent):
+        (WebCore::PlatformGestureEvent::deltaX):
+        (WebCore::PlatformGestureEvent::deltaY):
+        (WebCore::PlatformGestureEvent::shiftKey):
+        (WebCore::PlatformGestureEvent::ctrlKey):
+        (WebCore::PlatformGestureEvent::altKey):
+        (WebCore::PlatformGestureEvent::metaKey):
+        Added additional gesture types and parameters.
+        * platform/PlatformGestureRecognizer.h:
+        * platform/chromium/FramelessScrollView.h:
+        Added support for displatching gesture and touch events.
+        * platform/chromium/GestureRecognizerChromium.cpp:
+        (WebCore::InnerGestureRecognizer::InnerGestureRecognizer):
+        (WebCore::InnerGestureRecognizer::reset):
+        (WebCore::InnerGestureRecognizer::constructClickGestureEvent):
+        (WebCore::InnerGestureRecognizer::processTouchEventForGestures):
+        Removed all depedencies on EventHandler. Instead, create gesture
+        events from touch event stream.
+        (WebCore::InnerGestureRecognizer::constructScrollGesture):
+        (WebCore::touchDown):
+        (WebCore::noGesture):
+        (WebCore::click):
+        (WebCore::isClickOrScroll):
+        (WebCore::inScroll):
+        (WebCore::GestureRecognizerChromium::processTouchEventForGestures):
+        (WebCore::GestureRecognizerChromium::reset):
+        * platform/chromium/GestureRecognizerChromium.h:
+        * platform/chromium/PopupMenuChromium.cpp:
+        Added support to handle touch events and gesture events.
+        (WebCore::PopupContainer::handleTouchEvent):
+        (WebCore::PopupContainer::handleGestureEvent):
+        (WebCore::PopupListBox::handleTouchEvent):
+        (WebCore::PopupListBox::handleGestureEvent):
+        * platform/chromium/PopupMenuChromium.h:
+        * platform/mac/ScrollAnimatorMac.mm:
+        (WebCore::ScrollAnimatorMac::handleGestureEvent):
+        Ignores the newly added gesture event types.
+
+2011-07-26  Joseph Pecoraro  <joepeck@webkit.org>
+
+        Restore Composited Layers Faster from PageCache
+        https://bugs.webkit.org/show_bug.cgi?id=65216
+
+        Reviewed by Simon Fraser.
+
+        Restore the layer tree hierarchy a little sooner, when
+        restoring from the page cache. This more closely matches
+        original restore behavior.
+
+        Existing test showed no change.
+
+        * page/FrameView.cpp:
+        (WebCore::FrameView::restoreBackingStores):
+
+2011-07-26  Mike Reed  <reed@google.com>
+
+        [skia] never draw with GDI, so that all text can be gpu-accelerated
+        https://bugs.webkit.org/show_bug.cgi?id=65203
+
+        Reviewed by Kenneth Russell.
+
+        No new tests. existing tests apply to the new drawing path
+
+        * platform/graphics/chromium/FontChromiumWin.cpp:
+        (WebCore::TransparencyAwareFontPainter::TransparencyAwareGlyphPainter::drawGlyphs):
+        * platform/graphics/skia/SkiaFontWin.cpp:
+        (WebCore::windowsCanHandleDrawTextShadow):
+        (WebCore::windowsCanHandleTextDrawing):
+        (WebCore::windowsCanHandleTextDrawingWithoutShadow):
+
+2011-07-26  Kenneth Russell  <kbr@google.com>
+
+        Float32Array(ArrayBuffer, index, length) constructor working incorrectly.
+        https://bugs.webkit.org/show_bug.cgi?id=57042
+
+        Reviewed by James Robinson.
+
+        * bindings/js/JSArrayBufferViewHelper.h:
+        (WebCore::constructArrayBufferViewWithArrayBufferArgument):
+        * bindings/v8/custom/V8ArrayBufferViewCustom.h:
+        (WebCore::constructWebGLArrayWithArrayBufferArgument):
+
+2011-07-26  Chris Rogers  <crogers@google.com>
+
+        V8 custom bindings for AudioNode must do proper object checking and throw exception in case of error
+        https://bugs.webkit.org/show_bug.cgi?id=65222
+
+        Reviewed by James Robinson.
+
+        No new tests - this fixes upcoming audionode.html layout test
+
+        * bindings/v8/custom/V8AudioNodeCustom.cpp:
+        (WebCore::V8AudioNode::connectCallback):
+
+2011-07-26  Chris Rogers  <crogers@google.com>
+
+        AudioContext is not correctly accounting for hardware resources
+        https://bugs.webkit.org/show_bug.cgi?id=65217
+
+        Reviewed by Kenneth Russell.
+
+        No new tests since audio API is not yet implemented.
+
+        * webaudio/AudioContext.cpp:
+        (WebCore::AudioContext::create):
+        (WebCore::AudioContext::AudioContext):
+        (WebCore::AudioContext::lazyInitialize):
+
+2011-07-26  Luke Macpherson   <macpherson@chromium.org>
+
+        Handle CSS Properties that can be either auto or a primitive value in CSSStyleApplyProperty
+        https://bugs.webkit.org/show_bug.cgi?id=65164
+
+        Reviewed by Dimitri Glazkov.
+
+        No new tests / refactoring only.
+
+        * css/CSSPrimitiveValueMappings.h:
+        Add casts to/from various numeric types.
+        (WebCore::CSSPrimitiveValue::operator short):
+        (WebCore::CSSPrimitiveValue::CSSPrimitiveValue):
+        (WebCore::CSSPrimitiveValue::operator unsigned short):
+        (WebCore::CSSPrimitiveValue::operator int):
+        (WebCore::CSSPrimitiveValue::operator float):
+        * css/CSSStyleApplyProperty.cpp:
+        Add class to handle properties that set an "auto" boolean on RenderStyle.
+        (WebCore::ApplyPropertyAuto::ApplyPropertyAuto):
+        (WebCore::ApplyPropertyAuto::applyInheritValue):
+        (WebCore::ApplyPropertyAuto::applyInitialValue):
+        (WebCore::ApplyPropertyAuto::applyValue):
+        (WebCore::ApplyPropertyAuto::hasAuto):
+        (WebCore::ApplyPropertyAuto::setAuto):
+        (WebCore::CSSStyleApplyProperty::CSSStyleApplyProperty):
+        * css/CSSStyleSelector.cpp:
+        Remove existing implementations.
+        (WebCore::CSSStyleSelector::applyProperty):
+
+2011-07-26  Pratik Solanki  <psolanki@apple.com>
+
+        Add protection space authentication callback code to CFNetwork loader on Mac
+        https://bugs.webkit.org/show_bug.cgi?id=65190
+        <rdar://problem/9842424>
+
+        Reviewed by Oliver Hunt.
+
+        Port over protection space authentication callback code from ResourceHandleMac.mm to
+        ResourceHandleCFNet.cpp.
+
+        * platform/network/ResourceHandle.h:
+        * platform/network/cf/ResourceHandleCFNet.cpp:
+        (WebCore::canRespondToProtectionSpace):
+        (WebCore::ResourceHandle::createCFURLConnection):
+        (WebCore::ResourceHandle::canAuthenticateAgainstProtectionSpace):
+        (WebCore::WebCoreSynchronousLoaderClient::canAuthenticateAgainstProtectionSpace):
+        * platform/network/mac/ResourceHandleMac.mm:
+        (-[WebCoreResourceHandleAsDelegate connection:canAuthenticateAgainstProtectionSpace:]): Add logging.
+
+2011-07-26  Sadrul Habib Chowdhury  <sadrul@chromium.org>
+
+        Add support for download='filename' attribute in anchors.
+        https://bugs.webkit.org/show_bug.cgi?id=64580
+
+        Reviewed by Adam Barth.
+
+        The download attribute allows the author of the hyperlink to cause the
+        browser to download the linked URL.  The author can also supply a
+        suggested file name in the attribute value.  This feature is a recent
+        addition to HTML to better support offline applications that use blob
+        URLs.  Traditionally, web sites use the HTTP Content-Disposition header
+        to trigger downloads, but that option isn't available when working
+        offline.
+
+        There is some question about whether we should initiate a download when
+        we receive a DOM-created click event.  This patch does initiate the
+        download, but we might revise that decision in the future as part of a
+        larger change in how WebKit treats the interaction between default
+        event handlers and DOM-created events.
+
+        Tests: fast/dom/HTMLAnchorElement/anchor-download.html
+               fast/dom/HTMLAnchorElement/anchor-nodownload.html
+               fast/dom/HTMLAnchorElement/anchor-download-unset.html
+               fast/dom/HTMLAnchorElement/anchor-nodownload-set.html
+
+        * html/HTMLAnchorElement.cpp:
+        (WebCore::HTMLAnchorElement::defaultEventHandler):
+        (WebCore::HTMLAnchorElement::handleClick):
+        * html/HTMLAnchorElement.h:
+        * html/HTMLAnchorElement.idl:
+        * html/HTMLAttributeNames.in:
+        * loader/EmptyClients.h:
+        (WebCore::EmptyFrameLoaderClient::startDownload):
+        * loader/FrameLoaderClient.h:
+
+2011-07-26  Mark Hahnenberg  <mhahnenberg@apple.com>
+
+        Refactor automatically generated JS DOM bindings to replace operator new with static create methods
+        https://bugs.webkit.org/show_bug.cgi?id=64732
+
+        Reviewed by Oliver Hunt.
+
+        No new tests.
+
+        Replacing the public constructors in the automatically generated JS DOM bindings in CodeGeneratorJS.pm
+        with static create methods.  This is part of a larger refactoring effort to use static create methods
+        in the headers of the generated files (so as to be inline-able) in favor of public constructors throughout JSC.
+
+        * bindings/js/JSAudioConstructor.h:
+        (WebCore::JSAudioConstructor::create):
+        * bindings/js/JSDOMBinding.h:
+        (WebCore::createWrapper):
+        * bindings/js/JSDOMGlobalObject.h:
+        (WebCore::getDOMConstructor):
+        * bindings/js/JSDOMWindowCustom.cpp:
+        (WebCore::JSDOMWindow::history):
+        (WebCore::JSDOMWindow::location):
+        * bindings/js/JSDOMWindowShell.cpp:
+        (WebCore::JSDOMWindowShell::setWindow):
+        * bindings/js/JSDocumentCustom.cpp:
+        (WebCore::JSDocument::location):
+        * bindings/js/JSImageConstructor.h:
+        (WebCore::JSImageConstructor::create):
+        * bindings/js/JSImageDataCustom.cpp:
+        (WebCore::toJS):
+        * bindings/js/JSOptionConstructor.h:
+        (WebCore::JSOptionConstructor::create):
+        * bindings/js/WorkerScriptController.cpp:
+        (WebCore::WorkerScriptController::initScript):
+        * bindings/scripts/CodeGeneratorJS.pm:
+        (AddIncludesForTypeInImpl):
+        (AddIncludesForTypeInHeader):
+        (AddIncludesForType):
+        (GenerateHeader):
+        (GenerateImplementation):
+        (GenerateCallbackImplementation):
+        (GenerateConstructorDeclaration):
+        * bindings/scripts/test/JS/JSTestInterface.cpp:
+        (WebCore::JSTestInterfaceConstructor::create):
+        (WebCore::JSTestInterface::createPrototype):
+        * bindings/scripts/test/JS/JSTestInterface.h:
+        (WebCore::JSTestInterface::create):
+        (WebCore::JSTestInterfacePrototype::create):
+        * bindings/scripts/test/JS/JSTestMediaQueryListListener.cpp:
+        (WebCore::JSTestMediaQueryListListenerConstructor::create):
+        (WebCore::JSTestMediaQueryListListener::createPrototype):
+        * bindings/scripts/test/JS/JSTestMediaQueryListListener.h:
+        (WebCore::JSTestMediaQueryListListener::create):
+        (WebCore::JSTestMediaQueryListListenerPrototype::create):
+        * bindings/scripts/test/JS/JSTestObj.cpp:
+        (WebCore::JSTestObjConstructor::create):
+        (WebCore::JSTestObj::createPrototype):
+        * bindings/scripts/test/JS/JSTestObj.h:
+        (WebCore::JSTestObj::create):
+        (WebCore::JSTestObjPrototype::create):
+        * bindings/scripts/test/JS/JSTestSerializedScriptValueInterface.cpp:
+        (WebCore::JSTestSerializedScriptValueInterfaceConstructor::create):
+        (WebCore::JSTestSerializedScriptValueInterface::createPrototype):
+        * bindings/scripts/test/JS/JSTestSerializedScriptValueInterface.h:
+        (WebCore::JSTestSerializedScriptValueInterface::create):
+        (WebCore::JSTestSerializedScriptValueInterfacePrototype::create):
+        * bridge/jni/jsc/JavaArrayJSC.cpp:
+        (JavaArray::convertJObjectToArray):
+        * bridge/jsc/BridgeJSC.cpp:
+        (JSC::Bindings::Instance::newRuntimeObject):
+        * bridge/objc/objc_utility.mm:
+        (JSC::Bindings::convertObjcValueToValue):
+        * bridge/qt/qt_runtime.cpp:
+        (JSC::Bindings::convertQVariantToValue):
+        * bridge/runtime_array.h:
+        (JSC::RuntimeArray::create):
+        * bridge/runtime_object.h:
+        (JSC::Bindings::RuntimeObject::create):
+
+2011-07-26  Xiaomei Ji  <xji@chromium.org>
+
+        --webkit-visual-word does not work in multi-line
+        https://bugs.webkit.org/show_bug.cgi?id=61344
+
+        Reviewed by Ryosuke Niwa.
+
+        Replace Position(node, offset, PositionIsOffsetInAnchor) with 
+        createPositionAvoidingIgnoredNode(node, offset) which takes care of creating position 
+        before/after <br/> etc. editingIgnoresContent node. 
+
+        When iterate InlineBox, replace prevLeafChild and nextLeafChild (which only returns 
+        InlineBox within the same line) with leftInlineBox and rightInlineBox (which returns 
+        InlineBox across multiple lines).
+
+        * editing/htmlediting.cpp:
+        (WebCore::createPositionAvoidingIgnoredNode):
+        * editing/htmlediting.h:
+        * editing/visible_units.cpp:
+        (WebCore::previousWordBreakInBoxInsideBlockWithSameDirectionality): Replace Position() with
+        createPositionAvoidingIgnoredNode().
+        (WebCore::leftmostPositionInRTLBoxInLTRBlock): Ditto.
+        (WebCore::rightmostPositionInLTRBoxInRTLBlock): Ditto.
+        (WebCore::nextWordBreakInBoxInsideBlockWithDifferentDirectionality): Ditto.
+        (WebCore::blockWithPreviousLineBox): Added.
+        (WebCore::previousRootInlineBox): Added.
+        (WebCore::blockWithNextLineBox): Added.
+        (WebCore::nextRootInlineBox): Added.
+        (WebCore::leftInlineBox): Added.
+        (WebCore::rightInlineBox): Added.
+        (WebCore::leftWordBoundary): Replace prevLeafChild/nextLeafChild with leftInlineBox()
+        and rightInlineBox().
+        (WebCore::rightWordBoundary): Ditto.
+        (WebCore::leftWordPositionAcrossBoundary): Ditto.
+        (WebCore::rightWordPositionAcrossBoundary): Ditto.
+
+2011-07-26  David Hyatt  <hyatt@apple.com>
+
+        https://bugs.webkit.org/show_bug.cgi?id=60778
+
+        Use after free because of line box culling optimization regression.
+
+        In the case of a child with no line box being removed (typically
+        a <br> in quirks mode), if there is no previous sibling with a line
+        box, then we have a potential problem with the culling optimization.
+
+        The culled inline may still have other leaf line box children, but
+        they may follow the removed <br>. In this case we can't rely on
+        them, since we need a line box that comes before the <br>.
+
+        The fix is to simply recur up to the parent if we are a culled inline
+        and could not find a previous line box.
+
+        Reviewed by Dan Bernstein.
+
+        Added editing/execCommand/crash-line-break-after-outdent.html
+
+        * rendering/RenderLineBoxList.cpp:
+        (WebCore::RenderLineBoxList::dirtyLinesFromChangedChild):
+
+2011-07-26  Dan Bernstein  <mitz@apple.com>
+
+        <rdar://problem/9842889> Add a generic pictograph font family
+        https://bugs.webkit.org/show_bug.cgi?id=65197
+
+        Reviewed by Anders Carlsson.
+
+        Test: fast/css/font-family-pictograph.html
+
+        * WebCore.exp.in: Export Settings::setPictographFontFamily().
+        * css/CSSComputedStyleDeclaration.cpp:
+        (WebCore::identifierForFamily): Added -webkit-pictograph.
+        * css/CSSFontSelector.cpp:
+        (WebCore::CSSFontSelector::addFontFaceRule): Ditto.
+        (WebCore::fontDataForGenericFamily): Ditto.
+        * css/CSSStyleSelector.cpp:
+        (WebCore::CSSStyleSelector::applyProperty): Ditto.
+        * css/CSSValueKeywords.in:
+        * inspector/front-end/CSSKeywordCompletions.js: Ditto.
+        * inspector/front-end/SourceCSSTokenizer.js: Ditto.
+        (WebInspector.SourceCSSTokenizer):
+        * inspector/front-end/SourceCSSTokenizer.re2js: Ditto.
+        * page/Settings.cpp:
+        (WebCore::Settings::pictographFontFamily): Added this getter.
+        (WebCore::Settings::setPictographFontFamily): Added this setter.
+        * page/Settings.h:
+        * platform/graphics/FontDescription.h: Added PictographFamily to the GenericFamilyType enum.
+
+2011-07-26  Viet-Trung Luu  <viettrungluu@chromium.org>
+
+        Improve (i.e., speed up) .gyp(i) files for Chromium
+        https://bugs.webkit.org/show_bug.cgi?id=65032
+
+        Reviewed by Adam Barth.
+
+        This re-applies r91595 with the source exclusion fixed.
+
+        Test by building (in all supported configurations).
+
+        * WebCore.gyp/WebCore.gyp:
+        * WebCore.gypi:
+
+2011-07-26  Alexis Menard  <alexis.menard@openbossa.org>
+
+        [Qt] Disable video support on linux if the dependencies are not found.
+
+        If we can't find the necessary dependencies to build the GStreamer media player
+        we disable the video support. This is related to http://trac.webkit.org/changeset/91752.
+
+        Reviewed by Holger Freyther.
+
+        No new tests, it's a build fix.
+
+        * features.pri:
+
+2011-07-26  Evan Martin  <evan@chromium.org>
+
+        regression: generating CSSValueKeywords should not print by default
+        https://bugs.webkit.org/show_bug.cgi?id=65195
+
+        Reviewed by Tony Chang.
+
+        Some refactoring made some callers no longer pass the final 'beQuiet'
+        parameter to applyPreprocessor.  This flag was only used to print the
+        input filename anyway, so remove the flag and just make the caller
+        print the filename if it wants this.
+
+        * bindings/scripts/IDLParser.pm:
+        (Parse): print before calling applyPreprocessor, if necessary.
+        * bindings/scripts/preprocessor.pm:
+        (applyPreprocessor): remove the beQuiet flag; just always be quiet.
+
+2011-07-26  Raphael Kubo da Costa  <kubo@profusion.mobi>
+
+        [EFL] Do not crash on the isSlider() assert.
+        https://bugs.webkit.org/show_bug.cgi?id=65191
+
+        Reviewed by Antonio Gomes.
+
+        RenderThemeEfl's paintSliderThumb() just forwarded the call to
+        paintSliderTrack(), which, on its turn, called code that assumed that
+        object->isSlider() was true. That does not seem to be the case for
+        slidethumbs, so any page with an <input type="range"> tag would crash
+        WebKit.
+
+        We now do what RenderThemeQt does, and assume everything was properly
+        done in the call to paintSliderTrack().
+
+        No new tests, as this has been uncovered by an existing test.
+
+        * platform/efl/RenderThemeEfl.cpp:
+        (WebCore::RenderThemeEfl::paintSliderThumb):
+
+2011-07-26  Brian Salomon  <bsalomon@google.com>
+
+        [SKIA] Make the skia GL context current when drawing text to gpu backed platform context.
+        https://bugs.webkit.org/show_bug.cgi?id=65182
+
+        Reviewed by Stephen White.
+
+        No new tests. Not sure how to test wrong-ctx bugs in layout tests.
+
+        * platform/graphics/skia/SkiaFontWin.cpp:
+        (WebCore::paintSkiaText):
+
+2011-07-26  Emil A Eklund  <eae@chromium.org>
+
+        RenderText::absoluteRectsForRange() and absoluteQuadsForRange() have nearly duplicate code
+        https://bugs.webkit.org/show_bug.cgi?id=62478
+
+        Reviewed by Simon Fraser.
+
+        Test: fast/dom/Range/getClientRects.html
+
+        * platform/graphics/FloatRect.h:
+        (WebCore::FloatRect::isZero):
+        Add izZero method, unlike isEmpty this checks if both the width and the
+        height are zero.
+
+        * rendering/RenderText.cpp:
+        (WebCore::absoluteQuadForTextBox):
+        (WebCore::RenderText::absoluteRectsForRange):
+        (WebCore::RenderText::absoluteQuadsForRange):
+        Break duplicate code out of absoluteRectsForRange and
+        absoluteQuadsForRange into shared static function.
+        
+        Fix what I presume to be a bug in the absoluteQuadsForRange where the
+        logicalHeight was always used to set the size in absoluteQuadForTextBox
+        as oppsued to the absoluteRectsForRange implementation that uses the
+        logicalWidth or the logicalHeight depending on whether it's horizontal or
+        vertical.
+
+2011-07-26  Alexandru Chiculita  <achicu@adobe.com>
+
+        [CSSRegions] Collect flowed elements in different render element
+        https://bugs.webkit.org/show_bug.cgi?id=64516
+
+        All the RenderObjects that have a specified "flow" name are moved out of the
+        normal flow. A RenderFlowThread will collect all such RenderObjects. There is
+        a RenderFlowThread for each flow name. The new RenderFlowThread is an anonymous
+        RenderBlock that is positioned absolute and will not render directly. In a
+        different bug/patch we will add RenderRegion that will take care of rendering the
+        RenderFlowThread on screen.
+
+        Reviewed by Simon Fraser.
+
+        Tests: fast/regions/webkit-flow-renderer-layer.html
+               fast/regions/webkit-flow-renderer-nested.html
+               fast/regions/webkit-flow-renderer.html
+
+        * WebCore.vcproj/WebCore.vcproj:
+        * WebCore.xcodeproj/project.pbxproj:
+        * dom/Node.cpp:
+        (WebCore::Node::diff):
+        * dom/NodeRenderingContext.cpp:
+        (WebCore::NodeRenderingContext::NodeRenderingContext):
+        (WebCore::NodeRenderingContext::setStyle):
+        (WebCore::NodeRenderingContext::nextRenderer):
+        (WebCore::NodeRenderingContext::previousRenderer):
+        (WebCore::NodeRenderingContext::parentRenderer):
+        (WebCore::NodeRenderingContext::moveToFlowThreadIfNeeded):
+        (WebCore::NodeRendererFactory::createRendererIfNeeded):
+        * dom/NodeRenderingContext.h:
+        (WebCore::NodeRenderingContext::hasFlowThreadParent):
+        (WebCore::NodeRenderingContext::parentFlowRenderer):
+        * rendering/RenderFlowThread.cpp: Added.
+        (WebCore::RenderFlowThread::RenderFlowThread):
+        (WebCore::RenderFlowThread::createFlowThreadStyle):
+        (WebCore::RenderFlowThread::nextRendererForNode):
+        (WebCore::RenderFlowThread::previousRendererForNode):
+        (WebCore::RenderFlowThread::addChild):
+        (WebCore::RenderFlowThread::removeChild):
+        * rendering/RenderFlowThread.h: Added.
+        (WebCore::toRenderFlowThread):
+        * rendering/RenderLayer.cpp:
+        (WebCore::RenderLayer::collectLayers):
+        * rendering/RenderObject.h:
+        (WebCore::RenderObject::isRenderFlowThread):
+        * rendering/RenderTreeAsText.cpp:
+        (WebCore::RenderTreeAsText::writeRenderObject):
+        (WebCore::writeLayers):
+        * rendering/RenderView.cpp:
+        (WebCore::RenderView::renderFlowThreadWithName):
+        * rendering/RenderView.h:
+        * rendering/style/RenderStyle.cpp:
+        (WebCore::RenderStyle::diff):
+
+2011-07-26  Patrick Dubroy  <dubroy@chromium.org>
+
+        Filename text in file upload controls is not aligned with button text on
+        chromium-linux, chromium-win, and gtk.
+
+        https://bugs.webkit.org/show_bug.cgi?id=64692
+
+        The fix is to not include the margin, border, and padding in the calculation,
+        because those are already accounted for by RenderBlock::baselinePosition().
+
+        Reviewed by Dimitri Glazkov.
+
+        * rendering/RenderFileUploadControl.cpp:
+        (WebCore::RenderFileUploadControl::paintObject):
+
+2011-07-26  Sheriff Bot  <webkit.review.bot@gmail.com>
+
+        Unreviewed, rolling out r91746.
+        http://trac.webkit.org/changeset/91746
+        https://bugs.webkit.org/show_bug.cgi?id=65180
+
+        It broke SL build (Requested by Ossy on #webkit).
+
+        * dom/OptionElement.cpp:
+        (WebCore::OptionElement::normalizeText):
+
+2011-07-26  Pavel Feldman  <pfeldman@google.com>
+
+        Web Inspector: Better represent custom getters in the properties pane
+        https://bugs.webkit.org/show_bug.cgi?id=16734
+
+        Reviewed by Yury Semikhatsky.
+
+        Test: inspector/runtime/runtime-getProperties.html
+
+        * inspector/InjectedScriptSource.js:
+        (.):
+        * inspector/Inspector.json:
+        * inspector/front-end/ObjectPropertiesSection.js:
+        (WebInspector.ObjectPropertyTreeElement.prototype.update):
+
+2011-07-26  Alexis Menard  <alexis.menard@openbossa.org>
+
+        Reviewed by Andreas Kling.
+
+        [Qt] Change default backend to use GStreamer on Linux and QuickTime on Mac.
+        https://bugs.webkit.org/show_bug.cgi?id=63472
+
+        Enable the GStreamer backend and the QuickTime backend as default media players
+        for the Qt port on Mac and Linux. QtMultimedia is now a fallback option that you
+        can enable by passing DEFINES+=USE_QT_MULTIMEDIA=1 to enforce its usage.
+
+        No new tests. The media layout tests are disabled on the Qt port but hopefully with this
+        switch we can enable them again.
+
+        * WebCore.pri:
+        * WebCore.pro:
+        * features.pri:
+
+2011-07-26  Pavel Feldman  <pfeldman@google.com>
+
+        Web Inspector: Implement setPropertyValue using evaluate and callFunctionOn
+        https://bugs.webkit.org/show_bug.cgi?id=65112
+
+        Reviewed by Yury Semikhatsky.
+
+        Test: inspector/runtime/runtime-setPropertyValue.html
+
+        * inspector/InjectedScript.cpp:
+        * inspector/InjectedScript.h:
+        * inspector/InjectedScriptSource.js:
+        (.):
+        * inspector/Inspector.json:
+        * inspector/InspectorRuntimeAgent.cpp:
+        * inspector/InspectorRuntimeAgent.h:
+        * inspector/front-end/RemoteObject.js:
+        (WebInspector.RemoteObject.prototype.setPropertyValue.evaluatedCallback.setPropertyValue):
+        (WebInspector.RemoteObject.prototype.setPropertyValue.evaluatedCallback):
+        (WebInspector.RemoteObject.prototype.setPropertyValue.propertySetCallback):
+        (WebInspector.RemoteObject.prototype.setPropertyValue):
+
+2011-07-26  Pavel Feldman  <pfeldman@google.com>
+
+        Re-applying r91665 and r91668 with JSC issues fixed.
+
+        Web Inspector: use dedicated type for object id in the protocol.
+        Web Inspector: refactor remote object structure to contain value for primitive values.
+
+        https://bugs.webkit.org/show_bug.cgi?id=65103
+        https://bugs.webkit.org/show_bug.cgi?id=65110
+
+        Reviewed by Yury Semikhatsky.
+
+        * inspector/InjectedScript.cpp:
+        (WebCore::InjectedScript::callFunctionOn):
+        * inspector/InjectedScript.h:
+        * inspector/InjectedScriptSource.js:
+        * inspector/Inspector.json:
+        * inspector/InspectorRuntimeAgent.cpp:
+        (WebCore::InspectorRuntimeAgent::callFunctionOn):
+        * inspector/InspectorValues.cpp:
+        (WebCore::InspectorBasicValue::writeJSON):
+        * inspector/front-end/ConsoleView.js:
+        (WebInspector.ConsoleView.prototype._format):
+        (WebInspector.ConsoleView.prototype._formatAsArrayEntry):
+        (WebInspector.ConsoleMessage.prototype._format):
+        * inspector/front-end/ElementsTreeOutline.js:
+        (WebInspector.ElementsTreeElement.prototype._createTooltipForNode.setTooltip):
+        * inspector/front-end/ObjectPropertiesSection.js:
+        (WebInspector.ObjectPropertyTreeElement.prototype.update):
+        * inspector/front-end/PropertiesSidebarPane.js:
+        (WebInspector.PropertiesSidebarPane.prototype.update.nodePrototypesReady):
+        * inspector/front-end/RemoteObject.js:
+        (WebInspector.RemoteObject):
+        (WebInspector.RemoteObject.fromPrimitiveValue):
+        (WebInspector.RemoteObject.fromPayload):
+        (WebInspector.RemoteObject.prototype.get subtype):
+        (WebInspector.RemoteObject.prototype.callFunction):
+        (WebInspector.LocalJSONObject.prototype.get description):
+        (WebInspector.LocalJSONObject.prototype.get type):
+        (WebInspector.LocalJSONObject.prototype.get subtype):
+        * inspector/front-end/SourceFrame.js:
+        (WebInspector.SourceFrame.prototype._showPopup.showObjectPopup):
+        (WebInspector.SourceFrame.prototype._showPopup):
+        * inspector/front-end/inspector.js:
+        (WebInspector.log.logMessage):
+        (WebInspector.log):
+        (WebInspector.inspect):
+
+2011-07-26  Nikolas Zimmermann  <nzimmermann@rim.com>
+
+        Prepare animVal support - phase 2
+        https://bugs.webkit.org/show_bug.cgi?id=65167
+
+        Reviewed by Dirk Schulze.
+
+        Next patch preparing animVal support. Modify the SVGAnimatedProperty* classes & macros to assure that calling someElement->someProperty()
+        will return the animVal, when the property is being animated. Not yet hooked into SVGAnimateElement, this is just a preparation.
+
+        Doesn't affect any tests, yet.
+
+        * svg/SVGPathElement.cpp: Adapt to SVGAnimatedProperty::lookupWrapper changes (new template parameters have been added).
+        (WebCore::SVGPathElement::svgAttributeChanged):
+        * svg/SVGPathSegWithContext.h: Ditto.
+        (WebCore::SVGPathSegWithContext::animatedProperty):
+        * svg/SVGPolyElement.cpp: Ditto.
+        (WebCore::SVGPolyElement::parseMappedAttribute):
+        * svg/properties/SVGAnimatedEnumerationPropertyTearOff.h: Implement currentAnimatedValue, an abstract way to retrieve the underlying animated value for any animated type.
+        (WebCore::SVGAnimatedEnumerationPropertyTearOff::currentAnimatedValue): Forward call to SVGAnimatedStaticPropertyTearOff<int>, our base.
+        * svg/properties/SVGAnimatedListPropertyTearOff.h:
+        (WebCore::SVGAnimatedListPropertyTearOff::isAnimating): Returns whether this property is being animated or not.
+        (WebCore::SVGAnimatedListPropertyTearOff::currentAnimatedValue):
+        * svg/properties/SVGAnimatedProperty.h:
+        (WebCore::SVGAnimatedProperty::updateAnimVal): Will be used from SVGAnim*Element to update the current animVal, exposed to JS.
+        (WebCore::SVGAnimatedProperty::lookupOrCreateWrapper): Share more code with lookupWrapper.
+        (WebCore::SVGAnimatedProperty::lookupWrapper): Cleanup code, avoid doing any work for non-SVGElement derived objects, like SVGViewSpec.
+        * svg/properties/SVGAnimatedPropertyMacros.h: Make all lowerProperty() calls (eg. myRectElement->x()) return the animVal, if the property is being animated.
+        * svg/properties/SVGAnimatedPropertyTearOff.h: Main logic for the new animVal stuff.
+        (WebCore::SVGAnimatedPropertyTearOff::isAnimating):
+        (WebCore::SVGAnimatedPropertyTearOff::currentAnimatedValue):
+        (WebCore::SVGAnimatedPropertyTearOff::updateAnimVal):
+        (WebCore::SVGAnimatedPropertyTearOff::SVGAnimatedPropertyTearOff):
+        * svg/properties/SVGAnimatedStaticPropertyTearOff.h:
+        (WebCore::SVGAnimatedStaticPropertyTearOff::isAnimating):
+        (WebCore::SVGAnimatedStaticPropertyTearOff::currentAnimatedValue):
+        * svg/properties/SVGPropertyTearOff.h:
+        (WebCore::SVGPropertyTearOff::updateAnimVal):
+
+2011-07-26  Shinya Kawanaka  <shinyak@google.com>
+
+        Uses isHTMLSpace to normalize white spaces.
+        https://bugs.webkit.org/show_bug.cgi?id=57746
+
+        Reviewed by Kent Tamura.
+
+        Test: fast/forms/option-strip-unicode-spaces.html
+
+        * dom/OptionElement.cpp:
+        (WebCore::OptionElement::normalizeText):
+          Uses isHTMLSpace to trim and replace white spaces.
+
+2011-07-25  Ryuan Choi  <ryuan.choi@samsung.com>
+
+        [CMAKE] Split JSC related files from WebCore/CMakeLists.txt
+        https://bugs.webkit.org/show_bug.cgi?id=61350
+
+        Reviewed by Daniel Bates.
+
+        No new tests, just moving jsc related files from CMakeLists.txt to UseJSC.cmake.
+
+        * CMakeLists.txt:
+        * UseJSC.cmake:
+
+2011-07-25  Dan Bernstein  <mitz@apple.com>
+
+        Fix the build by committing a rename in this file that I neglected to include in the previous commit.
+
+        * css/CSSFontFaceSource.h:
+
+2011-07-25  Dan Bernstein  <mitz@apple.com>
+
+        <rdar://problem/9835028> Font loading during layout can cause layout code to be re-entered via resource load delegate
+        https://bugs.webkit.org/show_bug.cgi?id=65123
+
+        Reviewed by Anders Carlsson and Darin Adler.
+
+        Since CSSFontFaceSource::getFontData() can get called during layout, avoid calling out to loader
+        code from under it, and instead defer that work using a zero-delay timer.
+
+        * css/CSSFontFaceSource.cpp:
+        (WebCore::CSSFontFaceSource::CSSFontFaceSource):
+        (WebCore::CSSFontFaceSource::~CSSFontFaceSource):
+        (WebCore::CSSFontFaceSource::getFontData): Rather than starting the font load here, schedule
+        a zero-delay timer to do it.
+        (WebCore::CSSFontFaceSource::startLoadingTimerFired): Added. Starts loading the font if needed.
+        * css/CSSFontFaceSource.h:
+
+2011-07-25  Al Patrick  <apatrick@chromium.org>
+
+        Removed support for the GL_latch_CHROMIUM extension which Chromium no longer supports.
+        Replaced calls to SetLatch with calls to Flush since Flush now has barrier semantics in Chromium.
+        https://bugs.webkit.org/show_bug.cgi?id=65043
+
+        Reviewed by James Robinson.
+
+        * platform/graphics/chromium/Canvas2DLayerChromium.cpp:
+        (WebCore::Canvas2DLayerChromium::updateCompositorResources):
+        * platform/graphics/chromium/DrawingBufferChromium.cpp:
+        (WebCore::DrawingBuffer::publishToPlatformLayer):
+        * platform/graphics/chromium/Extensions3DChromium.h:
+        * platform/graphics/chromium/LayerRendererChromium.cpp:
+        (WebCore::LayerRendererChromium::LayerRendererChromium):
+        (WebCore::LayerRendererChromium::drawLayers):
+        (WebCore::LayerRendererChromium::addChildContext):
+        (WebCore::LayerRendererChromium::removeChildContext):
+        * platform/graphics/chromium/LayerRendererChromium.h:
+
+2011-07-25  Sam Weinig  <sam@webkit.org>
+
+        Refactor ScrollableArea pinned predicates to be more generally useful
+        <rdar://problem/9740379>
+
+        Reviewed by Dan Bernstein.
+
+        * platform/ScrollableArea.cpp:
+        (WebCore::ScrollableArea::isPinnedInBothDirections):
+        (WebCore::ScrollableArea::isPinnedHorizontallyInDirection):
+        (WebCore::ScrollableArea::isPinnedVerticallyInDirection):
+        * platform/ScrollableArea.h:
+
+2011-07-25  Nico Weber  <thakis@chromium.org>
+
+        [chromium] components/mac: Make webcore not depend on CoreAnimation
+        https://bugs.webkit.org/show_bug.cgi?id=65143
+
+        Reviewed by James Robinson.
+
+        * platform/chromium/ScrollAnimatorChromiumMac.mm:
+
+2011-07-25  Ian Henderson  <ianh@apple.com>
+
+        WebFrame should have a method to determine its visual emptiness
+        https://bugs.webkit.org/show_bug.cgi?id=64223
+
+        Reviewed by Dan Bernstein.
+
+        * page/FrameView.h:
+        (WebCore::FrameView::isVisuallyNonEmpty): Add an accessor to FrameView
+        so we can tell whether it's visually non-empty.
+
 2011-07-25  Scott Graham  <scottmg@chromium.org>
 
         REGRESSION (r39725?): Resources removed from document can not be freed until the document is deleted