Merge 96552 - REGRESSION(r94274): cloned text input loses value

Merge 96552 - REGRESSION(r94274): cloned text input loses value
https://bugs.webkit.org/show_bug.cgi?id=69095

Reviewed by Darin Adler.

Source/WebCore: 

The bug was caused by copyNonAttributeProperties not updating inner element text after copying
m_valueIfDirty. Fixed the bug by calling updateInnerTextValue.

Test: fast/forms/clone-input-with-dirty-value.html

* html/HTMLInputElement.cpp:
(WebCore::HTMLInputElement::copyNonAttributeProperties):

LayoutTests: 

Added a regression test that clones an input element with a dirty value.
The cloned input element should have the edited value.

* fast/forms/clone-input-with-dirty-value-expected.txt: Added.
* fast/forms/clone-input-with-dirty-value.html: Added.
Committed: http://src.chromium.org/viewvc/chrome?view=rev&revision=96735