Move the Widget hierarchy to the Oilpan heap.

Source/web/FrameLoaderClientImpl.h

 /*
  * Copyright (C) 2009, 2012 Google Inc. All rights reserved.
  * Copyright (C) 2011 Apple Inc. All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions are
  * met:
  *
  *     * Redistributions of source code must retain the above copyright
  * notice, this list of conditions and the following disclaimer.
@@ skipping 100 matching lines @@
     virtual void didRunInsecureContent(SecurityOrigin*, const KURL& insecureURL) OVERRIDE;
     virtual void didDetectXSS(const KURL&, bool didBlockEntirePage) OVERRIDE;
     virtual void didDispatchPingLoader(const KURL&) OVERRIDE;
     virtual void selectorMatchChanged(const Vector<String>& addedSelectors, const Vector<String>& removedSelectors) OVERRIDE;
     virtual PassRefPtr<DocumentLoader> createDocumentLoader(LocalFrame*, const ResourceRequest&, const SubstituteData&) OVERRIDE;
     virtual WTF::String userAgent(const KURL&) OVERRIDE;
     virtual WTF::String doNotTrackValue() OVERRIDE;
     virtual void transitionToCommittedForNewPage() OVERRIDE;
     virtual PassRefPtrWillBeRawPtr<LocalFrame> createFrame(const KURL&, const WTF::AtomicString& name, const Referrer&, HTMLFrameOwnerElement*) OVERRIDE;
     virtual bool canCreatePluginWithoutRenderer(const String& mimeType) const;
-    virtual PassRefPtr<Widget> createPlugin(
+    virtual PassRefPtrWillBeRawPtr<Widget> createPlugin(
         HTMLPlugInElement*, const KURL&,
         const Vector<WTF::String>&, const Vector<WTF::String>&,
         const WTF::String&, bool loadManually, DetachedPluginPolicy) OVERRIDE;
-    virtual PassRefPtr<Widget> createJavaAppletWidget(
+    virtual PassRefPtrWillBeRawPtr<Widget> createJavaAppletWidget(
         HTMLAppletElement*,
         const KURL& /* base_url */,
         const Vector<WTF::String>& paramNames,
         const Vector<WTF::String>& paramValues) OVERRIDE;
     virtual ObjectContentType objectContentType(
         const KURL&, const WTF::String& mimeType, bool shouldPreferPlugInsForImages) OVERRIDE;
     virtual void didChangeScrollOffset() OVERRIDE;
     virtual void didUpdateCurrentHistoryItem() OVERRIDE;
     virtual void didRemoveAllPendingStylesheet() OVERRIDE;
     virtual bool allowScript(bool enabledPerSettings) OVERRIDE;
@@ skipping 40 matching lines @@
     // The WebFrame that owns this object and manages its lifetime. Therefore,
     // the web frame object is guaranteed to exist.
     WebLocalFrameImpl* m_webFrame;
 };
 
 DEFINE_TYPE_CASTS(FrameLoaderClientImpl, FrameLoaderClient, client, client->isFrameLoaderClientImpl(), client.isFrameLoaderClientImpl());
 
 } // namespace blink
 
 #endif