merge_pr_46399

Fix a DCHECK if a block was seen in font-feature-settings.

We cannot Consume() in the streaming parser without first checking that
there's no block involved.

Fixed: 341349803
Change-Id: I0740fe7359f056a561dd1a82f1355b999537945a
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/5554250
Commit-Queue: Steinar H Gunderson sesse@chromium.org
Reviewed-by: Anders Hartvoll Ruud andruud@chromium.org
Cr-Commit-Position: refs/heads/main@{#1304312}

merge_pr_46388

Fix Null Dereference in css_parsing_utils

This CL addresses a null pointer dereference issue within the
ConsumeColorContrast functions located in css_parsing_utils.cc.
Previously, a null dereference occurred when the code attempted to
retrieve the color provider when the document was null. To resolve
this, the updated code now includes a validation check to ensure the
document object is valid before calling the GetColorProviderForPainting
method.

Bug: 337069153
Change-Id: Ieee6c0e3602b25e8b149c93643e4d55265e4467c
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/5497219
Reviewed-by: Alison Maher almaher@microsoft.com
Commit-Queue: Sam Davis Omekara samomekarajr@microsoft.com
Cr-Commit-Position: refs/heads/main@{#1304551}

merge_pr_46328

WebKit export of https://bugs.webkit.org/show_bug.cgi?id=274267 (#46328)

merge_pr_46322

Remove experimental oversized-images policy.

This document policy (previously feature policy) has been in an
experimental state for several years, and there are no current plans to
ship it. Removing the feature to reduce the maintenance burden of unused
code.

Bug: 340920459
Change-Id: I3a2f51c08e65861cc66adcfc90382b4929dd175b
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/5544840
Commit-Queue: Ian Clelland iclelland@chromium.org
Reviewed-by: Ian Kilpatrick ikilpatrick@chromium.org
Reviewed-by: danakj danakj@chromium.org
Cr-Commit-Position: refs/heads/main@{#1304366}

merge_pr_46310

[WebDriver BiDi] fix test_release_mouse_sequence_resets_dblclick_state (#46310)

• Move test to tentative, as the expected behavior is not clear yet.
• Remove parameter, as the double click is tested in test_dblclick_at_coordinates.

merge_pr_45621

[document picture-in-picture] Propagate user activation to the opener

This CL changes browser-process-side user activation logic to allow
activations in document picture-in-picture windows to be used in their
opener windows, and activations in the opener windows to be used in
their document picture-in-picture windows.

This feature is behind an enabled-by-default feature flag.

Specification change:
WICG/document-picture-in-picture#117

Chromestatus: https://chromestatus.com/feature/5185710702460928

Intent to Prototype:
https://groups.google.com/a/chromium.org/g/blink-dev/c/MwH0ODG4bec

Intent to Ship:
https://groups.google.com/a/chromium.org/g/blink-dev/c/AfzrMoCgccQ

Bug: 331246719
Change-Id: Iedad1e0cb60e04fc1ccf350405f04a399a2b72a1
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/5393891
Commit-Queue: Tommy Steimel steimel@chromium.org
Reviewed-by: Mustaq Ahmed mustaq@chromium.org
Reviewed-by: Daniel Cheng dcheng@chromium.org
Reviewed-by: Alex Moshchuk alexmos@chromium.org
Reviewed-by: Xianzhu Wang wangxianzhu@chromium.org
Cr-Commit-Position: refs/heads/main@{#1304599}

merge_pr_46416

Cleanup sec-ch-width auto sizes tests

This patch makes the following test cleanups for sec-ch-width auto sizes
tests:

• Delete sec-ch-width-auto-sizes-002.https.html which is no longer
  testing a useful codepath (everything is covered in -001).
• Remove an unnecessary media query from -003 that could fail on some
  viewport sizes.
• Rename -001 -> -img, and -003 -> -picture.

Thanks to Eric Portis for spotting these in
https://chromium-review.googlesource.com/c/chromium/src/+/5531414/5#message-2509e3e290ac9bf9afca14f19739ab6bd8eab35c

Bug: 335630145
Change-Id: Idfc39a00e82cb0d25b842c90022fb3bf48f9b32d
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/5552524
Commit-Queue: Traian Captan tcaptan@chromium.org
Reviewed-by: Traian Captan tcaptan@chromium.org
Auto-Submit: Philip Rogers pdr@chromium.org
Cr-Commit-Position: refs/heads/main@{#1304038}

merge_pr_46414

Delete sanitizer-api/WEB_FEATURES.yml (#46414)

In response to web-platform-dx/web-features#1000

merge_pr_46409

Use AnimatedPropertyIDSet for EffectSet::mPropertiesForAnimationsLevel.

We keep a set of properties which are running on the
CascadeLevel::Animations, to make sure we compose the correct properties
for the rule on Animations/Transitions cascade level.

In other words, without this patch, we may accidentally compose an
animation rule for CascadeLevel::Animations (from the KeyframeEffect of
the existing transition), even if we don't have any running animations,
if this transition property is a custom property.

The resolution is to use AnimatedPropertyIDSet, for
mPropertiesForAnimationsLevel, so we can skip the custom properties which
shouldn't belong to Animations cascade level when composing them.

Note that we don't change the logic, and we are still using
nsCSSPropertyIDSet for EffectSet::mPropertiesWithImportantRules
because compositor animations don't allow custom properties now.
(This could be a future work I guess, if we are using custom property
values for opacity, translate, rotate, scale, etc.)

Also, I noticed the subtest, "No transition when removing @Property rule",
is similar to the testcase in this bug, and so it got passed as well.

Differential Revision: https://phabricator.services.mozilla.com/D210589

bugzilla-url: https://bugzilla.mozilla.org/show_bug.cgi?id=1888317
gecko-commit: 905d7610caf3eeca29029173dfb718321ae2ebdb
gecko-reviewers: layout-reviewers, zrhoffman, emilio

merge_pr_46406

Move dialog-close-via-attribute to be tentative

The feature isn't shipped, and the spec isn't agreed, so this
test should be tentative.

Bug: 3419353
Change-Id: Ie4406e6b88ba7d620e755ec250febe924f7ca425
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/5553313
Commit-Queue: Joey Arhar jarhar@chromium.org
Reviewed-by: Joey Arhar jarhar@chromium.org
Auto-Submit: Mason Freed masonf@chromium.org
Cr-Commit-Position: refs/heads/main@{#1303856}