Fix readonly and type attribute selector incorrect style sharing

Fix readonly and type attribute selector incorrect style sharing

RuleSet has a special case in isCommonAttributeSelectorAttribute for
allowing style sharing on elements that match "type" or "readonly"
attribute selectors as long as they have the same value. This was
added long ago in r96393 and worked based on the assumption that
there was logic in canShareStyleWithElement that actually checked
the value of the type and readonly attributes on the style sharing
candidates.

Later in r123730 the type attribute handling was regressed when it
was moved to only check the value for <input>. The readonly attribute
was later regressed in the same way in r134984.

This patch restores the checks those two patches moved but retains the
switch from getAttribute to fastGetAttribute for HTML which was likely
most of the performance improvement and fixes the bug where elements
would incorrectly share style even if one of them matched an attribute
selector.

Unfortunately this does mean that we need to call the slow geAttribute
in SVG documents which may be a minor regression. We can work to
improve the performance of SVG in the future once we get the
correctness back.

BUG=307170
R=leviw@chromium.org

Committed: https://src.chromium.org/viewvc/blink?view=rev&revision=159699

[leviw_travelin_and_unemployed, 2013-10-15 07:20:56]

Great catch! lgtm.

[commit-bot: I haz the power, 2013-10-15 07:45:14]

CQ is trying da patch. Follow status at
https://chromium-status.appspot.com/cq/esprehn@chromium.org/27033011/1

[commit-bot: I haz the power, 2013-10-15 10:19:52]

Change committed as 159662

[leviw_travelin_and_unemployed, 2013-10-15 20:17:13]

Thanks for the explanation on irc. LGTM.

[commit-bot: I haz the power, 2013-10-15 20:19:23]

CQ is trying da patch. Follow status at
https://chromium-status.appspot.com/cq/esprehn@chromium.org/27033011/13001

[esprehn, 2013-10-15 23:59:22]

Committed patchset #2 manually as r159699 (presubmit successful).