2010-07-21 Peter Beverloo Reviewed by Eric Carlson. Removed support for the -khtml CSS vendor prefix and limit the -apple prefix to two properties (dashboard-region and line-clamp). Test: fast/css/limited-vendor-prefix-behavior.html * css/CSSParser.cpp: (WebCore::cssPropertyID): 2010-07-21 Adam Barth Reviewed by Eric Seidel. Fix the last tree HTML5 tree builder crashes https://bugs.webkit.org/show_bug.cgi?id=42773 This patch changes the internal representation of a bookmark to handle the case where one of the adjecent entries in the list of active formatting elements is actually a marker. After this patch, the bookmarking mechanism isn't as general, but it works for the cases we need in the adoption agency. Also, after this patch, there aren't any more known crashers in the HTML5 tree builder. :) * html/HTMLFormattingElementList.cpp: (WebCore::HTMLFormattingElementList::bookmarkFor): (WebCore::HTMLFormattingElementList::swapTo): * html/HTMLFormattingElementList.h: (WebCore::HTMLFormattingElementList::Bookmark::Bookmark): (WebCore::HTMLFormattingElementList::Bookmark::moveToAfter): (WebCore::HTMLFormattingElementList::Bookmark::hasBeenMoved): (WebCore::HTMLFormattingElementList::Bookmark::mark): (WebCore::HTMLFormattingElementList::first): * html/HTMLTreeBuilder.cpp: (WebCore::HTMLTreeBuilder::callTheAdoptionAgency): 2010-07-21 Tony Gentilcore Unreviewed build fix. Disable overzealous ASSERT https://bugs.webkit.org/show_bug.cgi?id=42775 No new tests because no changed functionality. * loader/FrameLoader.cpp: (WebCore::FrameLoader::stopLoading): 2010-07-21 Yael Aharon Reviewed by Darin Adler. Crash in Notification::disconnectFrame() triggered by Frame::lifeSupportTimerFired() https://bugs.webkit.org/show_bug.cgi?id=42534 Call NotificationsCenter::disconnectFrame() when the frame is disconnected from the page. Calling it from the destructor of Frame is too late and sometimes causes access violation. I was not able to reproduce this crash, so did not add new tests. This patch is based on the error reported in http://code.google.com/p/chromium/issues/detail?id=49323. * page/DOMWindow.cpp: (WebCore::DOMWindow::pageDestroyed): * page/DOMWindow.h: * page/Frame.cpp: (WebCore::Frame::pageDestroyed): 2010-07-21 Anders Carlsson Reviewed by Sam Weinig. Don't assert when clicking on a plug-in in WebKit2 https://bugs.webkit.org/show_bug.cgi?id=42762 Remove a now invalid assert and return false instead. * page/mac/EventHandlerMac.mm: (WebCore::EventHandler::passMouseDownEventToWidget): 2010-07-21 Anton Muhin Reviewed by Adam Barth. [v8] Revert r60670 as it introduced a regression: in some cases named children couldn't be retrieved. https://bugs.webkit.org/show_bug.cgi?id=42766 See http://code.google.com/p/chromium/issues/detail?id=48804 for more details. * bindings/scripts/CodeGeneratorV8.pm: * bindings/v8/ScriptController.cpp: (WebCore::ScriptController::namedItemAdded): (WebCore::ScriptController::namedItemRemoved): * bindings/v8/V8DOMWindowShell.cpp: (WebCore::V8DOMWindowShell::updateDocumentWrapperCache): * bindings/v8/V8DOMWindowShell.h: * bindings/v8/V8DOMWrapper.cpp: (WebCore::V8DOMWrapper::instantiateV8Object): * bindings/v8/custom/V8HTMLDocumentCustom.cpp: (WebCore::V8HTMLDocument::namedPropertyDeleter): (WebCore::V8HTMLDocument::namedPropertyGetter): (WebCore::V8HTMLDocument::indexedPropertyGetter): (WebCore::V8HTMLDocument::allAccessorSetter): (WebCore::toV8): 2010-07-21 Eric Carlson Reviewed by Simon Fraser. Update plug-in proxy backed