19 | | * https://trac.webkit.org/changeset/242917 ''Fix an edge case where HTMLFormElement::removeFormElement is invoked twice with the same element'' |
20 | | * https://trac.webkit.org/changeset/242919 ''Use RenderBox::previousSiblingBox/nextSiblingBox in RenderMultiColumnFlow'' |
21 | | * https://trac.webkit.org/changeset/242921 ''[WeakPtr] RenderListMarker::m_listItem should be a WeakPtr'' |
22 | | * https://trac.webkit.org/changeset/242943 ''Cleanup inline boxes when list marker gets blockified'' |
23 | | * https://trac.webkit.org/changeset/242964 ''Storing a Node in Ref/RefPtr inside its destructor results in double delete'' |
| 19 | * ~~https://trac.webkit.org/changeset/242917 ''Fix an edge case where HTMLFormElement::removeFormElement is invoked twice with the same element''~~ |
| 20 | * ~~https://trac.webkit.org/changeset/242919 ''Use RenderBox::previousSiblingBox/nextSiblingBox in RenderMultiColumnFlow''~~ |
| 21 | * ~~https://trac.webkit.org/changeset/242921 ''[WeakPtr] RenderListMarker::m_listItem should be a WeakPtr''~~ |
| 22 | * ~~https://trac.webkit.org/changeset/242943 ''Cleanup inline boxes when list marker gets blockified''~~ |
| 23 | * ~~https://trac.webkit.org/changeset/242964 ''Storing a Node in Ref/RefPtr inside its destructor results in double delete''~~ |
27 | | * https://trac.webkit.org/changeset/243069 ''Structure::flattenDictionary() should clear unused property slots.'' |
28 | | * https://trac.webkit.org/changeset/243175 ''Reparenting during a mutation event inside appendChild could result in a circular DOM tree'' |
29 | | * https://trac.webkit.org/changeset/243182 ''Rebaseline the test after r243175. It got somehow landed with failing expectations.'' |
30 | | * https://trac.webkit.org/changeset/243280 ''Cap length of an array with spread to MIN_ARRAY_STORAGE_CONSTRUCTION_LENGTH.'' |
31 | | * https://trac.webkit.org/changeset/243291 ''Fix possible memory leak when dismissing a color picker'' |
32 | | * https://trac.webkit.org/changeset/243233 ''appendChild should throw when inserting an ancestor of a template into its content adopted to another document'' |
33 | | * https://trac.webkit.org/changeset/243331 ''Do not insert the first-letter anonymous container until after we've constructed the first-letter renderer.'' |
34 | | * https://trac.webkit.org/changeset/243341 ''Inband Text Track cues interspersed with Data cues can display out of order.'' |
| 27 | * ~~https://trac.webkit.org/changeset/243069 ''Structure::flattenDictionary() should clear unused property slots.''~~ |
| 28 | * ~~https://trac.webkit.org/changeset/243175 ''Reparenting during a mutation event inside appendChild could result in a circular DOM tree''~~ |
| 29 | * ~~https://trac.webkit.org/changeset/243182 ''Rebaseline the test after r243175. It got somehow landed with failing expectations.''~~ |
| 30 | * ~~https://trac.webkit.org/changeset/243280 ''Cap length of an array with spread to MIN_ARRAY_STORAGE_CONSTRUCTION_LENGTH.''~~ |
| 31 | * ~~https://trac.webkit.org/changeset/243291 ''Fix possible memory leak when dismissing a color picker''~~ |
| 32 | * ~~https://trac.webkit.org/changeset/243233 ''appendChild should throw when inserting an ancestor of a template into its content adopted to another document''~~ |
| 33 | * ~~https://trac.webkit.org/changeset/243331 ''Do not insert the first-letter anonymous container until after we've constructed the first-letter renderer.''~~ |
| 34 | * ~~https://trac.webkit.org/changeset/243341 ''Inband Text Track cues interspersed with Data cues can display out of order.''~~ |
40 | | * https://trac.webkit.org/changeset/243639 ''BackwardsGraph needs to consider back edges as the backward's root successor'' |
41 | | * https://trac.webkit.org/changeset/243804 ''Get rid of HTMLInputElement::setEditingValue'' |
42 | | * https://trac.webkit.org/changeset/243820 ''Crash in HTMLCanvasElement::createContext2d after the element got adopted to a new document'' |
43 | | * https://trac.webkit.org/changeset/243828 ''Documents can be destroyed before their CSSFontFaceSet is destroyed'' |
| 40 | * ~~https://trac.webkit.org/changeset/243639 ''BackwardsGraph needs to consider back edges as the backward's root successor''~~ |
| 41 | * ~~https://trac.webkit.org/changeset/243804 ''Get rid of HTMLInputElement::setEditingValue''~~ |
| 42 | * ~~https://trac.webkit.org/changeset/243820 ''Crash in HTMLCanvasElement::createContext2d after the element got adopted to a new document''~~ |
| 43 | * ~~https://trac.webkit.org/changeset/243828 ''Documents can be destroyed before their CSSFontFaceSet is destroyed''~~ |