Don't allow out-of-flow positioned and floating children under LayoutMedia

third_party/WebKit/Source/core/BUILD.gn

 # Copyright 2014 The Chromium Authors. All rights reserved.
 # Use of this source code is governed by a BSD-style license that can be
 # found in the LICENSE file.
 
 import("//build/config/chromecast_build.gni")
 import("//build/toolchain/toolchain.gni")
 import("//build/config/ui.gni")
 import("//build/split_static_library.gni")
 import("//testing/libfuzzer/fuzzer_test.gni")
 import("//third_party/WebKit/Source/bindings/bindings.gni")
@@ skipping 1139 matching lines @@
     "html/track/TextTrackListTest.cpp",
     "html/track/vtt/BufferedLineReaderTest.cpp",
     "html/track/vtt/VTTScannerTest.cpp",
     "input/EventHandlerTest.cpp",
     "inspector/ProtocolParserTest.cpp",
     "layout/ImageQualityControllerTest.cpp",
     "layout/LayoutBlockTest.cpp",
     "layout/LayoutBoxModelObjectTest.cpp",
     "layout/LayoutBoxTest.cpp",
     "layout/LayoutInlineTest.cpp",
+    "layout/LayoutMediaTest.cpp",
     "layout/LayoutMultiColumnFlowThreadTest.cpp",
     "layout/LayoutObjectTest.cpp",
     "layout/LayoutPartTest.cpp",
     "layout/LayoutProgressTest.cpp",
     "layout/LayoutTableCellTest.cpp",
     "layout/LayoutTableRowTest.cpp",
     "layout/LayoutTableSectionTest.cpp",
     "layout/LayoutTestHelper.cpp",
     "layout/LayoutTestHelper.h",
     "layout/LayoutTextTest.cpp",
@@ skipping 140 matching lines @@
   sources = [
     "frame/csp/ContentSecurityPolicyFuzzer.cpp",
   ]
   deps = [
     ":core",
     "//third_party/WebKit/Source/platform:blink_fuzzer_test_support",
   ]
   dict = "//testing/libfuzzer/fuzzers/dicts/content_security_policy.dict"
   seed_corpus = "//testing/libfuzzer/fuzzers/content_security_policy_corpus"
 }