merge_pr_43

Limit backtracking on regexp called from blink.

It is possible to block the main thread with a invalid pattern, input
and CSS. Now that V8 has added a backtracking limit take advantage of it.
1000000 matches the limit Yarr (webkit's regex engine). See
https://github.com/WebKit/webkit/blob/89c28d471fae35f1788a0f857067896a10af8974/Source/JavaScriptCore/yarr/Yarr.h#L50

BUG=966405

Change-Id: I08bc956806bc7efb8cdc06dc0db30fa94e68df9c
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/1915280
Commit-Queue: Dave Tapuska dtapuska@chromium.org
Reviewed-by: Jeremy Roman jbroman@chromium.org
Cr-Commit-Position: refs/heads/master@{#715312}

merge_pr_42

Add SVG marker tests for orient auto and auto-start-reverse

merge_pr_41

Update psutil from 5.6.6 to 5.6.7

merge_pr_40

[css-pseudo] Fix assert failure when combining ::first-line and ::marker

The interaction of a ::marker pseudo-element with a 'content' property
and the ::first-line of the list-item produced a DCHECK failure in debug
builds (it was fine with debug disabled). This patch fixes it.

Bug: 457718

TEST=external/wpt/css/css-pseudo/first-line-and-marker.html

Change-Id: I443934f3a5cbfd95913287ac2bfb0966fa707e3d
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/1937068
Reviewed-by: Rune Lillesveen futhark@chromium.org
Reviewed-by: Koji Ishii kojii@chromium.org
Commit-Queue: Oriol Brufau obrufau@igalia.com
Cr-Commit-Position: refs/heads/master@{#719561}

merge_pr_39

Update interfaces/web-nfc.idl (web-platform-tests#20475)

Source: https://github.com/tidoust/reffy-reports/blob/497ccc2/ed/idl/web-nfc.idl
Build: https://travis-ci.org/tidoust/reffy-reports/builds/617704186

merge_pr_38

Update interfaces/resize-observer.idl (web-platform-tests#20466)

Source: https://github.com/tidoust/reffy-reports/blob/36fe518/ed/idl/resize-observer.idl
Build: https://travis-ci.org/tidoust/reffy-reports/builds/617488341

merge_pr_37

Mark idlharness tests for fetch/xhr as slow

They depend on dom/html which is slow. Also remove entries from
TestExpectations because they are covered either by

• the long timeout introduced here, or
• MSAN related expectations (see https://crbug.com/856601)

Bug: 1026151, 990900, 856601
Change-Id: I094590d485c318fef5ab4c2e213a621211a6a3a1
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/1936444
Commit-Queue: Yutaka Hirano yhirano@chromium.org
Auto-Submit: Yutaka Hirano yhirano@chromium.org
Reviewed-by: Hiroki Nakagawa nhiroki@chromium.org
Cr-Commit-Position: refs/heads/master@{#719517}

merge_pr_36

Cookie Store: Rework the SW change events API.

Looking into two crashers revealed misconceptions in the initial Cookie
Store API implementation for change events in service works. This CL
reworks the API surface and brings it closer to other features.

The current API shape is that a SW version specifies the cookie changes
it's interested in by calling subscribeToCookieChanges() on the SW
global scope. getChangeSubscriptions() is available on the SW global
scope, and reflects the cumulative effect of all
subscribeToCookieChanges() calls during the install event.
Implementation errors aside, this API shape doesn't have a simple model
for continuously monitoring a cookie's change -- in the window between
deactivating an old SW version and activating the new version, there is
no obvious list of cookie change subscriptions.

The new API shape brings Cookie Store in line with the other SW APIs.
Cookie change subscriptions are associated with the SW registration, and
can be managed using
registration.cookies.{subscribe,unsubscribe,getSubscriptions}().

Unlike other SW APIs, the registration's subscriptions can be managed
from the SW itself, as well as from windows. We expect that most
applications will prefer to manage subscriptions from the SW code. This
exposes a rough edge -- a registration cannot be modified until the
first version of a SW is installed, so the methods listed above will
fail during a SW's first install event, but succeed during later install
events. We intend to evaluate the impact of this rough edge in an Origin
Trial.

Associated spec change: WICG/cookie-store#111

Bug: 729800, 956732, 963042
Change-Id: I106a7d9b2e50a7304c5ad126e0f699ecac1de531
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/1837146
Commit-Queue: Victor Costan pwnall@chromium.org
Reviewed-by: Kinuko Yasuda kinuko@chromium.org
Reviewed-by: Marijn Kruisselbrink mek@chromium.org
Reviewed-by: Staphany Park staphany@chromium.org
Cr-Commit-Position: refs/heads/master@{#719476}

merge_pr_35

Port calc interpolation to wpt

Both Chrome and Firefox passed

Bug: 900581
Change-Id: I7a8e4b3b7f2d040df128cd614e95b8a247d99e71
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/1937907
Reviewed-by: Xida Chen xidachen@chromium.org
Commit-Queue: Hao Sheng haozhes@chromium.org
Cr-Commit-Position: refs/heads/master@{#719355}

merge_pr_34

Port the border-image-slice-interpolation-stability test

Both Chrome and Firefox pass

The original test is kept because it's in the smoke test

Bug: 900581
Change-Id: Iaa581f78cdde875f25a0accfbd953ba54277e9f9
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/1937513
Reviewed-by: Xida Chen xidachen@chromium.org
Commit-Queue: Hao Sheng haozhes@chromium.org
Cr-Commit-Position: refs/heads/master@{#719340}