import changes from `dev' branch of rmottola/Arctic-Fox:

- some legal stuff, stay safe (e26e18fe92)
- Bug 1253124 - Check return values in and around js::ValueToSourceForError r=jandem (dc00ae80bc)
- Bug 1221378: Use a dedicated flag on JS::Zone to disable allocation metadata collection, instead of abusing AutoEnterAnalysis. r=fitzgen (a39a050cea)
- Bug 1257468 - Add --enable-project=js when calling configure for js/src from subconfigure.py. r=gps (df23bf21cc)
- Bug 1255527 - Remove sutagent/watcher; r=jmaher (7f0f536a35)
- Bug 1220716 - Removing nsICurrentCharsetListener. r=emk (d5b01215e8)
- Bug 956899 - Convert exclusive access lock from PRLock to Mutex; r=jandem (d4dc913f51)
- Bug 1252905. Don't invoke the interrupt callback while an exception is pending. r=jandem (762bed231e)
- Bug 1251675 - Add a Mutex<T> type, based on Rust's `std::sync::Mutex<T>`. r=terrence, r=jimb (10eb70bf07)
- NO BUG - Do not print diagnostics messages by default in js/src/jsapi-tests/testMutex.cpp on a CLOSED TREE; r=me (49f3fb6a44)
- Bug 956899 - Move and rename rust-alike Mutex to ExclusiveData; r=fitzgen (fa8421162f)
- Bug 956899 - Add a platform agnostic std::mutex work-alike; r=froydnj (7e991c3452)
- Bug 956899 - Replace ExclusiveData PRLock usage with Mutex; r=fitzgen (32af2e5ac4)
- Bug 956899 - Replace PRLock with Mutex in TraceLoggingGraph; r=h4writer (98feb957f5)
- Bug 956899 - Replace PRLock with Mutex in TraceLogger; r=h4writer (0aaf13825d)
- Bug 1242462 - IonSpewer: Write one log file per process. r=h4writer (89158ca321)
- Bug 956899 - Replace PRLock with Mutex in JitSpewer; r=nbp (0926da57f4)
- Bug 956899 - Add a std::lock_guard work-alike; r=froydnj (9562d7c220)
- Bug 956899 - Teach check_spidermonkey_style.py about mozglue; r=njn (c01c08595f)
- Bug 956899 - Implement an RAII unlocking primitive to compliment LockGuard; r=froydnj (7c366764c6)
- Bug 1258818 - Fix bad search/replace from b411b94f8d91 (from bug 956899). r=terrence (47bac2bc34)
- Bug 1255795 - use UniqueTwoByteChars in AtomizeUTF8Chars (r=jandem) (6187f0f7c2)
- Bug 1240502 - Fix debug-only dense elements check in SpreadCallOperation to not fail after a TI OOM. r=arai (d7d03ac85d)
- Bug 1257040 - Disable C4577 to unblock compilation on VS2015; r=jorendorff (acc571fca5)
- Bug 1255766 - Tracelogger: Mark resizing of memory also as internal tracelogger time, r=bbouvier (767ee0dd73)
- Bug 1257102 - Invoking a trap on a proxy, where the handler has null ¦as the value of that trap, should fall back to operating on the target just like undefined would. r=evilpie (7c72b25a88)
- Bug 1214013 - Add fuzz test. (r=efaust) (a7c3eccf37)
- Bug 1198833 - Variable redeclaration should be a syntax error r=shu (d2c0e9d7ad)
- Bug 1252924 - SIMD.*.prototype.toString(); r=waldo (ee3456280a)
- Bug 1252927 - SIMD: Truncate before range check. r=sunfish (9fe432ead7)
- Bug 1252924 - SIMD.*.prototype.valueOf. r=waldo (ae917c754e)
- Bug 1252270 - SIMD: Coerce non-numeric indexes to load/store functions. r=lth (f16722e671)
- Bug 1256945 - Coerce SIMD lane indexes with ToNumber(). r=bbouvier (c59ed63e98)
- Bug 1241432 - Implement GB18030-2005. r=smontagu (432d698684)
- Bug 1155263 - missing <stdint.h> header in rulebrk.c r=dholbert (a8ca47c0dd)
- Bug 1225934. Better describe the effect of the flag FLAG_HIGH_QUALITY_SCALING. Comment only change. (8ff70e3766)
- Bug 1251405. Part 1. Fix a significant signed/unsigned mismatch in handling the return value of FrameAnimator::GetSingleLoopTime. r=edwin (cd80cc1505)
- Bug 1251405. Part 2. Use 64 bit ints to hold the delay between the current time and the last animation time. r=edwin (71e1af9250)
- Bug 926048. Part 1. Simplify FrameAnimator::AdvanceFrame slightly. We don't need a |timeout| variable, we only check it once. r=edwin (fad20cc1dc)
- Bug 926048. Part 2. Remove useless GetRawFrame call. r=edwin (e5dec6bbf7)
- Bug 926048. Part 3. Correctly check if we are at the end of an animated image. r=edwin (906d4ce883)
- Bug 926048. Part 4. Update the current animation frame time if we hit the end of decoded frames before all frames are decoded. r=edwin (09ca5732f4)
- Bug 1251403. Determine the correct index of the next frame before getting the next frame. r=edwin (024cf9cddf)
- Bug 1220082 - Assign frame ids to animated images so that they get invalidated correctly. r=seth (c80a29d4ae)
- Bug 1225934 - Never allow surface substitution when FLAG_HIGH_QUALITY_SCALING is disabled. r=tn (2f8515aa5c)
- Bug 1251807 - Use the surface's size, not the intrinsic size, in CopyFrame. r=tn (aeb9e251cd)
- Bug 1251806 - In RasterImage::GetFrameInternal(), check if the frame covers the actual surface size rather than the requested surface size. r=tn (c257ec96c2)
- Bug 1251808 - Construct the SourceSurfaceImage with the correct size in RasterImage::GetCurrentImage(). r=seth (f8ed7b0485)
- bug 1223466 - update extended validation information to deal with root removals in NSS 3.21 r=mgoodwin (d0a7a8c2d9)
- bug 1241564 - remove EV treatment for TÃRKTRUST Elektronik Sertifika Hizmet SaÄlayıcısı SHA-1 root certificate r=Cykesiopka (1fa9bdc5b2)
- bug 1236964 - enable Certum Trusted Network CA 2 root certificate for EV treatment r=jcj (d3effc42d0)
- Bug 1254689 - Remove SEC_NORMAL where loadingPrincipal is SystemPrincipal or NullPrincipal. r=sicking (5500cbc930)
- Bug 1228314 - added static_cast<int64> in order to avoid overflow. r=seth (f0503f879b)
- Bug 1251742. Avoid overflow in computing area of surface sizes in SurfaceCache. r=dholbert (69731a1cc2)
- Bug 1251091. Fix surface key comparison in ImageSurfaceCache::LookupBestMatch. r=dholbert (ca003cf8e5)

dom/html/nsHTMLDocument.cpp

@@ -1223,9 +1223,11 @@ nsHTMLDocument::CreateDummyChannelForCookies(nsIURI* aCodebaseURI)
   // FOR ANY OTHER PURPOSE.
   MOZ_ASSERT(!mChannel);
 
+  // The following channel is never openend, so it does not matter what
+  // securityFlags we pass; let's follow the principle of least privilege.
   nsCOMPtr<nsIChannel> channel;
   NS_NewChannel(getter_AddRefs(channel), aCodebaseURI, this,
-                nsILoadInfo::SEC_NORMAL,
+                nsILoadInfo::SEC_REQUIRE_SAME_ORIGIN_DATA_IS_BLOCKED,
                 nsIContentPolicy::TYPE_INVALID);
   nsCOMPtr<nsIPrivateBrowsingChannel> pbChannel =
     do_QueryInterface(channel);