| 19 | | * https://trac.webkit.org/changeset/242917 ''Fix an edge case where HTMLFormElement::removeFormElement is invoked twice with the same element'' |
| 20 | | * https://trac.webkit.org/changeset/242919 ''Use RenderBox::previousSiblingBox/nextSiblingBox in RenderMultiColumnFlow'' |
| 21 | | * https://trac.webkit.org/changeset/242921 ''[WeakPtr] RenderListMarker::m_listItem should be a WeakPtr'' |
| 22 | | * https://trac.webkit.org/changeset/242943 ''Cleanup inline boxes when list marker gets blockified'' |
| 23 | | * https://trac.webkit.org/changeset/242964 ''Storing a Node in Ref/RefPtr inside its destructor results in double delete'' |
| | 19 | * ~~https://trac.webkit.org/changeset/242917 ''Fix an edge case where HTMLFormElement::removeFormElement is invoked twice with the same element''~~ |
| | 20 | * ~~https://trac.webkit.org/changeset/242919 ''Use RenderBox::previousSiblingBox/nextSiblingBox in RenderMultiColumnFlow''~~ |
| | 21 | * ~~https://trac.webkit.org/changeset/242921 ''[WeakPtr] RenderListMarker::m_listItem should be a WeakPtr''~~ |
| | 22 | * ~~https://trac.webkit.org/changeset/242943 ''Cleanup inline boxes when list marker gets blockified''~~ |
| | 23 | * ~~https://trac.webkit.org/changeset/242964 ''Storing a Node in Ref/RefPtr inside its destructor results in double delete''~~ |
| 27 | | * https://trac.webkit.org/changeset/243069 ''Structure::flattenDictionary() should clear unused property slots.'' |
| 28 | | * https://trac.webkit.org/changeset/243175 ''Reparenting during a mutation event inside appendChild could result in a circular DOM tree'' |
| 29 | | * https://trac.webkit.org/changeset/243182 ''Rebaseline the test after r243175. It got somehow landed with failing expectations.'' |
| 30 | | * https://trac.webkit.org/changeset/243280 ''Cap length of an array with spread to MIN_ARRAY_STORAGE_CONSTRUCTION_LENGTH.'' |
| 31 | | * https://trac.webkit.org/changeset/243291 ''Fix possible memory leak when dismissing a color picker'' |
| 32 | | * https://trac.webkit.org/changeset/243233 ''appendChild should throw when inserting an ancestor of a template into its content adopted to another document'' |
| 33 | | * https://trac.webkit.org/changeset/243331 ''Do not insert the first-letter anonymous container until after we've constructed the first-letter renderer.'' |
| 34 | | * https://trac.webkit.org/changeset/243341 ''Inband Text Track cues interspersed with Data cues can display out of order.'' |
| | 27 | * ~~https://trac.webkit.org/changeset/243069 ''Structure::flattenDictionary() should clear unused property slots.''~~ |
| | 28 | * ~~https://trac.webkit.org/changeset/243175 ''Reparenting during a mutation event inside appendChild could result in a circular DOM tree''~~ |
| | 29 | * ~~https://trac.webkit.org/changeset/243182 ''Rebaseline the test after r243175. It got somehow landed with failing expectations.''~~ |
| | 30 | * ~~https://trac.webkit.org/changeset/243280 ''Cap length of an array with spread to MIN_ARRAY_STORAGE_CONSTRUCTION_LENGTH.''~~ |
| | 31 | * ~~https://trac.webkit.org/changeset/243291 ''Fix possible memory leak when dismissing a color picker''~~ |
| | 32 | * ~~https://trac.webkit.org/changeset/243233 ''appendChild should throw when inserting an ancestor of a template into its content adopted to another document''~~ |
| | 33 | * ~~https://trac.webkit.org/changeset/243331 ''Do not insert the first-letter anonymous container until after we've constructed the first-letter renderer.''~~ |
| | 34 | * ~~https://trac.webkit.org/changeset/243341 ''Inband Text Track cues interspersed with Data cues can display out of order.''~~ |
| 40 | | * https://trac.webkit.org/changeset/243639 ''BackwardsGraph needs to consider back edges as the backward's root successor'' |
| 41 | | * https://trac.webkit.org/changeset/243804 ''Get rid of HTMLInputElement::setEditingValue'' |
| 42 | | * https://trac.webkit.org/changeset/243820 ''Crash in HTMLCanvasElement::createContext2d after the element got adopted to a new document'' |
| 43 | | * https://trac.webkit.org/changeset/243828 ''Documents can be destroyed before their CSSFontFaceSet is destroyed'' |
| | 40 | * ~~https://trac.webkit.org/changeset/243639 ''BackwardsGraph needs to consider back edges as the backward's root successor''~~ |
| | 41 | * ~~https://trac.webkit.org/changeset/243804 ''Get rid of HTMLInputElement::setEditingValue''~~ |
| | 42 | * ~~https://trac.webkit.org/changeset/243820 ''Crash in HTMLCanvasElement::createContext2d after the element got adopted to a new document''~~ |
| | 43 | * ~~https://trac.webkit.org/changeset/243828 ''Documents can be destroyed before their CSSFontFaceSet is destroyed''~~ |