Move MediaQuery classes off BlinkGC heap

third_party/WebKit/Source/core/css/MediaQueryList.h

Index: third_party/WebKit/Source/core/css/MediaQueryList.h
diff --git a/third_party/WebKit/Source/core/css/MediaQueryList.h b/third_party/WebKit/Source/core/css/MediaQueryList.h
index 8da0eba071dc9508c26723a452958e1874175d64..f584b55aaddaaef807acdb89e4a8c512b15a2c75 100644
--- a/third_party/WebKit/Source/core/css/MediaQueryList.h
+++ b/third_party/WebKit/Source/core/css/MediaQueryList.h
@@ -52,7 +52,7 @@ class CORE_EXPORT MediaQueryList final
  public:
   static MediaQueryList* create(ExecutionContext*,
                                 MediaQueryMatcher*,
-                                MediaQuerySet*);
+                                RefPtr<MediaQuerySet>);
   ~MediaQueryList() override;
 
   String media() const;
@@ -86,12 +86,12 @@ class CORE_EXPORT MediaQueryList final
   ExecutionContext* getExecutionContext() const override;
 
  private:
-  MediaQueryList(ExecutionContext*, MediaQueryMatcher*, MediaQuerySet*);
+  MediaQueryList(ExecutionContext*, MediaQueryMatcher*, RefPtr<MediaQuerySet>);
 
   bool updateMatches();
 
   Member<MediaQueryMatcher> m_matcher;
-  Member<MediaQuerySet> m_media;
+  RefPtr<MediaQuerySet> m_media;
   using ListenerList = HeapListHashSet<Member<MediaQueryListListener>>;
   ListenerList m_listeners;
   bool m_matchesDirty;