Bug 1582802 - enable new audio focus management on Android Nightly. r=sebastian In bug 1565689, we have implemented new an audio focus management, which allows us to address audio competition even if those audio happens on different processes. We can try to enable this new mechanism on Android Nightly first, where we have enabled managing audio competition by default. Differential Revision: https://phabricator.services.mozilla.com/D46636

Bug 1582948 - Disable test_storageSessionStorageEventCheckNoPropagation.html on fission. r=kmag Differential Revision: https://phabricator.services.mozilla.com/D47059

Bug 1581117 - Properly invalidate theme data from the media query change in LightweightThemeConsumer.jsm. r=kmag,dao Just this._update() is not enough to update everything that changing the theme implies. Instead, use the observer mechanism so all the pieces of code involved update properly. Differential Revision: https://phabricator.services.mozilla.com/D45926

Bug 1580274 remove unused ip value from proxy schema r=robwu Differential Revision: https://phabricator.services.mozilla.com/D47121

Bug 1581004 - disabled test_mozfiledataurl.html on fission r=kmag Differential Revision: https://phabricator.services.mozilla.com/D46261

Backed out changeset 029511f2fefc (bug 1560808) for failing browser-chrome's browser_policies_notice_in_aboutpreferences.js and browser_policies_mistyped_json.js. CLOSED TREE

Bug 1582520: Part 5 - Test that named subframe properties are accessible in cross-origin-objects.html. r=bzbarsky Differential Revision: https://phabricator.services.mozilla.com/D46867

Bug 1582520: Part 4 - Update cross-origin-objects web platform tests for cross-origin this objects. r=bzbarsky Same origin native functions called with a compatible cross-origin `this` object are meant to apply the same security checks as if a property getter for the method had been called on the `this` object directly. Firefox has some tests for this behavior, but the web platform test suite does not. This patch adds comprehensive tests for all getters/setters/methods on Window and Location objects for both the allowed and forbidden cases. Differential Revision: https://phabricator.services.mozilla.com/D46736

Bug 1582520: Part 3 - Fix RemoteObjectProxy immutable prototype implementation. r=bzbarsky Cross-origin objects are supposed to have null prototypes, and throw when attempting to set the prototype to any value other than null. Ordinary cross-origin objects handle this correctly. RemoteObjectProxy has hooks which are meant to give them the same behavior, but which are never actually triggered, because the proxy objects are missing the required lazy prototype flags. Simply using the built-in prototype slot and setting it to immutable triggers the desired behavior with much less implementation overhead. Differential Revision: https://phabricator.services.mozilla.com/D46735

Bug 1582520: Part 2 - Fix RemoteObjectProxy hasOwnProperty hook behavior. r=bzbarsky Object.hasOwnProperty called on a cross-origin object needs to return true for any property returned by its property enumerator or get hook, and throw a security error for anything else. Ordinary cross-origin objects currently behave correctly, but RemoteObjectProxy objects return false for indexed frame getters, and never throw security exceptions for inaccessible properties. This patch fixes both of those issues by removing the `hasOwn` hook and falling back to the BaseProxyHandler implementation, which defers to the `getOwnPropertyDescriptor` hook. This is slightly more expensive, since it requires reifying property descriptors for every check, but it should be a relatively uncommon operation on cross-origin objects, and should not be particularly expensive for any properties of a RemoteObjectProxy. Differential Revision: https://phabricator.services.mozilla.com/D46734

Bug 1582520: Part 1 - Treat remote object proxies as opaque wrappers when unwrapping. r=peterv We support calling WebIDL prototype methods on cross-compartment objects as long as they're same-type and same-origin. Any attempt to call them on cross-origin wrappers with security policies leads to a security error. Remote object proxies look and behave like cross-origin objects, but are not technically wrappers. This means that for non-cross-origin-accessible method/getter calls, we just treat them as same-origin objects which do not implement the correct interface. Aside from being confusing, this makes it easy for web content to distinguish between remote and in-process objects with the same interface, which they generally should not be able to do. Treating remote object proxies as if they were opaque wrappers solves these problems. Differential Revision: https://phabricator.services.mozilla.com/D46495

Bug 1583581: Make promise-based async senders generated by IPDL use std::move to pass its arguments to the callback-based sender; r=nika Differential Revision: https://phabricator.services.mozilla.com/D46968

Bug 1443259 remove deprecated proxy APIs r=robwu Differential Revision: https://phabricator.services.mozilla.com/D46886

Bug 1583225 - Import WebCompat GoFaster 6.1.0 sources; r=miketaylr Import WebCompat GoFaster 6.1.0 sources Differential Revision: https://phabricator.services.mozilla.com/D46814

Bug 1580728 - Wire up backend of blocked URLs r=Honza Differential Revision: https://phabricator.services.mozilla.com/D46671

Backed out changeset f04641fbd147 (bug 1355389) for linting at /builds/worker/checkouts/gecko/mobile/android/components/FilePicker.js. On a CLOSED TREE

Bug 1583878 - Expose WebGL OVR_multiview2. r=lsalzman Differential Revision: https://phabricator.services.mozilla.com/D47104

Bug 1581914 - Set default margins for html|input in global.css r=dao Differential Revision: https://phabricator.services.mozilla.com/D46531

Bug 1355389 - Filepicker can now handle multiple files r=AndreiLazar Differential Revision: https://phabricator.services.mozilla.com/D46790

Bug 1572806 - Added profile_date parameter to Telemetry Activation Ping r=VladBaicu Profile creation date (profile_date) is now embedded in Telemetry Activation Ping. Differential Revision: https://phabricator.services.mozilla.com/D47097