| 39 | | * https://trac.webkit.org/changeset/236161 ''Ensure that ForInContexts are invalidated if their loop local is over-written.'' |
| 40 | | * https://trac.webkit.org/changeset/236288 ''Release assert under RenderView::pageOrViewLogicalHeight'' |
| 41 | | * https://trac.webkit.org/changeset/236789 ''Ref<FetchResponse> use-after-move in DOMCache::put()'' |
| 42 | | * https://trac.webkit.org/changeset/236928 ''Validation in Connection::readBytesFromSocket() is too aggressive'' |
| 43 | | * https://trac.webkit.org/changeset/236961 ''[GStreamer] Stealing cross-origin video pixel with HLS'' |
| 44 | | * https://trac.webkit.org/changeset/236975 ''[WPE] Explicitly link against gmodule where used'' |
| 45 | | * https://trac.webkit.org/changeset/236985 ''[WPE][GTK] Complex text crashes with harfbuzz 1.8.8'' |
| 46 | | * https://trac.webkit.org/changeset/236991 ''REGRESSION(r234620): SVGLangSpace::svgAttributeChanged() should invalidate the renderer of the SVGGeometryElement descendant only'' |
| 47 | | * https://trac.webkit.org/changeset/237119 ''[Cairo] Incorrect rendering for 135-deg skews'' |
| | 39 | * ~~https://trac.webkit.org/changeset/236161 ''Ensure that ForInContexts are invalidated if their loop local is over-written.''~~ |
| | 40 | * ~~https://trac.webkit.org/changeset/236288 ''Release assert under RenderView::pageOrViewLogicalHeight''~~ |
| | 41 | * ~~https://trac.webkit.org/changeset/236789 ''Ref<FetchResponse> use-after-move in DOMCache::put()''~~ |
| | 42 | * ~~https://trac.webkit.org/changeset/236928 ''Validation in Connection::readBytesFromSocket() is too aggressive''~~ |
| | 43 | * ~~https://trac.webkit.org/changeset/236961 ''[GStreamer] Stealing cross-origin video pixel with HLS''~~ |
| | 44 | * ~~https://trac.webkit.org/changeset/236975 ''[WPE] Explicitly link against gmodule where used''~~ |
| | 45 | * ~~https://trac.webkit.org/changeset/236985 ''[WPE][GTK] Complex text crashes with harfbuzz 1.8.8''~~ |
| | 46 | * ~~https://trac.webkit.org/changeset/236991 ''REGRESSION(r234620): SVGLangSpace::svgAttributeChanged() should invalidate the renderer of the SVGGeometryElement descendant only''~~ |
| | 47 | * ~~https://trac.webkit.org/changeset/237119 ''[Cairo] Incorrect rendering for 135-deg skews''~~ |