merge_pr_50600

[wdspec] Extend test suite for "userContexts" argument of "sessions.subscribe" command.

Differential Revision: https://phabricator.services.mozilla.com/D236694

bugzilla-url: https://bugzilla.mozilla.org/show_bug.cgi?id=1938604
gecko-commit: e60f809fa4bc5f38abac8db1240d97d708be9d3f
gecko-reviewers: webdriver-reviewers, jdescottes

merge_pr_50599

IDB: Make Transaction::abort() throw error when txn is committing

Ensure the abort() method throws an “InvalidStateError” DOMException
when called during the committing state of a transaction. Update the
transaction state to kCommitting during auto-commits to align with
the spec (IndexedDB Spec).

Bug: 390986925
Change-Id: Id7c1bc8d56cacc761b00c6ea41c24a518f5c0693
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/6176649
Auto-Submit: Garima Chadha [email protected]
Commit-Queue: Garima Chadha [email protected]
Reviewed-by: Abhishek Shanthkumar [email protected]
Reviewed-by: Steve Becker [email protected]
Cr-Commit-Position: refs/heads/main@{#1417978}

merge_pr_50598

[Editing] Fix content loss during list indent operation

While indenting list items, the start_of_paragraph_to_move was not
enclosing all list item children causing content loss. This change
addresses the issue by updating start_of_paragraph_to_move to before
list item's first child.

Spec: https://w3c.github.io/editing/docs/execCommand/#toggling-lists
Bug: 4111528
Change-Id: I211dc63f6408a384055bff7c570289e474c694c1
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/6217110
Commit-Queue: Tanu Jain [email protected]
Reviewed-by: Siye Liu [email protected]
Reviewed-by: Kent Tamura [email protected]
Cr-Commit-Position: refs/heads/main@{#1417971}

merge_pr_50590

Prevent choosing a font face labelled 'italic' when the style explicitly requested 'oblique'.

Differential Revision: https://phabricator.services.mozilla.com/D237194

bugzilla-url: https://bugzilla.mozilla.org/show_bug.cgi?id=1945642
gecko-commit: a3432e7f8a9775692c6945ab3438c1c46267d821
gecko-reviewers: dholbert

merge_pr_50596

Fix whitespace in overflow-shorthand-002.html (#50596)

merge_pr_50594

dom: Always replace unpaired surrogates when handling page text

Background:

JavaScript strings are potentially ill-formed UTF-16 (arbitrary
Vec) and can contain unpaired surrogates. Rust’s String type is
well-formed UTF-8 and can not contain any surrogate. Surrogates are
never emitted when decoding bytes from the network, but they can sneak
in through document.write, the Element.innerHtml setter, or other DOM
APIs.

In 2015, Servo launched an experiment to see if unpaired surrogates
cropped up in page content. That experiment caused Servo to panic if
unpaired surrogates were encountered with a request to report the page
to bug #6564. During that time several pages were reported with unpaired
surrogates, causing Servo to panic. In addition, when running the WPT
tests Servo will never panic due to the -Z replace-surrogates option
being passed by the test driver.

Motivation:

After this 10 year experiment, it's clear that unpaired surrogates are a
real concern in page content. Several reports were filed of Servo
panicking after encountering them in real world pages. A complete fix for
this issue would be to somehow maintain unpaired surrogates in the DOM,
but that is a much larger task than simply emitting U+FFD instead of an
unpaired surrogate.

Since it is clear that this kind of content exists, it is better for
Servo to try its best to handle the content rather than crash as
production browsers should not crash due to user content when possible.
In this change, I modify Servo to always replace unpaired surrogates.

It would have been ideal to only crash when debug assertions are
enabled, but debug assertions are enabled by default in release mode --
so this wouldn't be effective for WPT tests.

Signed-off-by: Martin Robinson [email protected]

merge_pr_50593

WebKit export of https://bugs.webkit.org/show_bug.cgi?id=287327 (#50593)

merge_pr_50595

Fix text direction inherit in workers

Canvas text direction should be transferred to workers.
Update the serialization code to do so. Also rename the
somewhat misnamed "serialized_color_params" to
"serialized_canvas_params" because they serialize a lot
more than color.

And fix the test I added recently which is super flaky due
to a malformed rAF.

And fix some pre-submit warnings.

Bug: 390272618
Change-Id: I594fd0ad8ebd7d3ba258a3f1b9aac1f15af65ac6
Fixed: 393820272
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/6229469
Reviewed-by: Andres Ricardo Perez [email protected]
Commit-Queue: Stephen Chenney [email protected]
Cr-Commit-Position: refs/heads/main@{#1417763}

merge_pr_50591

Add a WPT test for setTimeout vs setInterval clamping.

Bug: 41380458

Change-Id: I5c8758b9df2b3d9f6e9e3009524218ea3bb4533c
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/6240888
Reviewed-by: Scott Haseley [email protected]
Commit-Queue: Chris Harrelson [email protected]
Cr-Commit-Position: refs/heads/main@{#1417698}

merge_pr_50589

Make Event::GetPrimaryFrameOfEventTarget return nullptr if target is moved outside the original `nsPresContext

Chrome returns some computed value for offsetX and offsetY even in this
hacky case, but we should return {0, 0} for now to keep the traditional
behavior [1] and avoid the crash because Chrome's behavior is also tricky
because they cache offset values at first access. Let's change the behavior
in a separated bug.

1. https://searchfox.org/mozilla-central/rev/80343eb85f0bda693730a394496ce66e48eae561/dom/events/Event.cpp#683,702-704

Differential Revision: https://phabricator.services.mozilla.com/D237172

bugzilla-url: https://bugzilla.mozilla.org/show_bug.cgi?id=1946461
gecko-commit: c9b281a867f33bb3aa88dd8318abe1c50d22e81d
gecko-reviewers: smaug, emilio