Notify nodes removal to Range/Selection after dispatching blur and mutation event

LayoutTests/fast/dom/Range/range-after-remove-children.html

Index: LayoutTests/fast/dom/Range/range-after-remove-children.html
diff --git a/LayoutTests/fast/dom/Range/range-after-remove-children.html b/LayoutTests/fast/dom/Range/range-after-remove-children.html
new file mode 100644
index 0000000000000000000000000000000000000000..ab67f4fbdd47e3f8788c99e542196832f1408f27
--- /dev/null
+++ b/LayoutTests/fast/dom/Range/range-after-remove-children.html
@@ -0,0 +1,28 @@
+<div id="container">
+<p id="description"></p>
+<div id="sample">foobar</div>
+</div>
+<div id="console"></div>
+<script src="../../js/resources/js-test-pre.js"></script>
+<script>
+description('Range objects should be updated after set innerHTML.');
+
+function $(id) { return document.getElementById(id); }
+
+var range = null;
+document.addEventListener('DOMNodeRemovedFromDocument', function () {
+    if (range)
+        return;
+    range = document.createRange();
+    range.selectNodeContents(sample.firstChild);
+}, true);
+
+$('sample').innerHTML = '';
+
+shouldBe('range.startOffset', '0');
+shouldBe('range.endOffset', '0');
+
+if (window.testRunner)
+    $('container').outerHTML = '';
+</script>
+<script src="../../js/resources/js-test-post.js"></script>