- Bug 1165052 - Part 9: Use ArraySpeciesCreate in Array.prototype.filter. r=efaust (198da18845)
- Bug 1165052 - Part 10: Use ArraySpeciesCreate in Array.prototype.map. r=efaust (9dcd625daa)
- Bug 1263618: Adapt assertions in RegExp*Raw functions for int32_t; r=arai (8ad46db66d)
- Bug 1263340 - Part 1: Use internal slot for global and sticky flags in RegExpBuiltinExec. r=h4writer (9b5fbe6358)
- Bug 1263340 - Part 2: Use internal slot for sticky flag in @@replace and @@search optimized path. r=h4writer (2b64567c6a)
- Bug 1264264 - Add optimized path for RegExp.prototype[@@replace] with functional replace and substitution. r=till (e55722bc0a)
- Bug 1263340 - Part 3: Use internal slot for sticky flag in RegExp native functions. r=h4writer (725cf7b9b0)
- Bug 1264264 - Part 2: Enable optimization for packers again in RegExp.prototype[@@replace]. r=h4writer (7f4b819e40)
- Bug 1268056 - Check if |this| value is a RegExp object in the optimized path in RegExpSplit. r=h4writer (8891f0a3ef)
- Bug 1263340 - Part 4: Followup for @@split - Apply optimized path for empty string too. r=till (956d1804a5)
- Bug 1261207 - Forward declare js::ScriptSource instead of casting `¦void*` pointers; r=jimb (4914273e96)
- Bug 1041586 - Implement Symbol.isConcatSpreadable. r=arai (238e5f97c6)
- Bug 1041586 - Use IsConcatSpreadable in Array.prototype.concat. r=arai (33333cb30f)
- Bug 1165052 - Part 11: Use ArraySpeciesCreate in Array.prototype.slice. r=efaust (45f34c0a87)
- Bug 1165052 - Part 12: Use ArraySpeciesCreate in Array.prototype.splice. r=efaust,evilpie (096f9ff03d)
- Bug 1165052 - Part 13: Add tests for ArraySpeciesCreate. r=efaust (4403642d3c)
- Bug 1041586 - Tests. r=arai (efc2d06863)
- Bug 1267364 - Check isNative every time in GetStringDataProperty. r=h4writer (6e7898c494)
- Bug 1041586 - Fold away property accesses to not-defined properties. r=jandem (216e6387db)
- add emacs (fa858771bf)
- Bug 1268574 - Check the outparam JSFunction* value after GetGetterPure. r=lth (3d80c79337)
- Bug 1263888 - Push TypeBarrier after ArraySlice. r=jandem (2617518401)
- Bug 1255316 - IonMonkey: Enable folding of MLoadUnboxedObjectOrNull with the stored value, r=jandem (0f75675721)
- Bug 1252313 - Fix wasm i64 shift ops with a constant rhs. r=bbouvier (2c05b901c6)
- Bug 1263609: SharedStubs - Port JSOP_POW to shared stubs, r=efaust (54523590d9)
- Bug 1247880 - Only remove MUrsh operands when the input of MUrsh is guaranteed to be unsigned. r=sunfish (4a29e0b071)
- Bug 1254528: IonMonkey - Check slot before removing load with value of store, r=nbp (3527eb5263)
- Bug 1255316 - IonMonkey: Also take into account the offsetAdjustment when folding MLoadUnboxedObjectOrNull, r=jandem (9cbea97df1)
- Bug 1263558 - Part 1: Self-host Array generics. r=till,bholley (e1dc0c54c8)
- Bug 1103588 - Part 3: Replace deprecated String#contains warning with an expression closure warning in sharedWorker_sharedWorker.js test. r=bz (221ff40ebc)
- Bug 1103588 - Part 4: Replace deprecated String#contains in js tests. r=till (a794c0b385)
- Bug 1103588 - Part 5: Remove deprecated String#contains function; use String#includes instead. r=till (bc1365603e)
- Bug 964709 - Updates Parser regex and tests to support self-closing script tags, r=vporof (f04c475ec8)
- Bug 1224726 - Do not attempt to parse source file when searching in debugger if text > 1MB;r=jlongster (8743b7bf19)
- Bug 1263558 - Part 2: Self-host String generics. r=till (4e5766489b)
- Bug 1263558 - Part 3: Remove JSFUN_GENERIC_NATIVE. r=till (3f94c198b0)
- Bug 1263558 - Part 4: Call initBuiltinConstructor after defining properties in InitStringClass. r=till (f25edc6096)
- Bug 1263558 - Part 0.1: Handle OOM inside BuildDominatorTree at AnalyzeNewScriptDefiniteProperties and AnalyzeArgumentsUsage. r=jandem (0f4745e9d4)
- Bug 1266573 - Add the JS::ubi::dumpPaths debug utility; r=jimb (9a8680d7c7)
- Bug 1266835 - Request names from the rootlist in JS::ubi::dumpPaths and clean up formatting of dumped paths. r=jimb (1e15dd3ab9)
- Bug 1259911: Only add predecessors to the join block once; r=sunfish (53a9522e68)
- Bug 1258905: Remove a bunch of dead IPC code. r=jld (0d9f930a14)
- Bug 1266869 - Print a message when no retaining paths are found in JS::ubi::dumpPaths. r=jimb (77a541b4d1)
- Bug 1248105 - Move CSSPseudoElement::GetParentObject out of header, r=boris (b851c3806d)
- Bug 1248581 - Fix build bustage on WakeLock.h and CSSPseudoElement.h. r=khuey (fb47a96889)
- Bug 1249230 - Prepend an extra colon to the pseudo type string. r=birtles (6af63f00de)
- fix build on Mac > 10.5 (1ae9402eaf)
- Bug 1241118 - Add gc = GetGeneralCategory(ch) when sc == MOZ_SCRIPT_COMMON. r=jfkthame (51dfbede47)
- minor crash rep (1e7e5bc97e)
- Bug 1240904 - Remove ParamTraits for NPString and NPVariant. r=bsmedberg (1850d10374)
- bug 1170584 - fix PluginMessageUtils on iOS. r=jimm (c624cbe92d)
- Bug 1170343 - Use release-mode asserts when plugins making NPAPI calls on the wrong thread, r=mccr8 (15c71250f4)
- Bug 1239525 - Make sure async plugin initialization is off if e10s is on. r=aklotz (07e73ce74d)
- Bug 1128454 - When plugin bridging fails, propagate the error back to the content process without aborting tabs. r=billm (e1547c00ab)
- Bug 1222169 - remove unused function from PluginProcessChild.cpp; r=aklotz (11a8fc32e1)
- Bug 1239749 - Remove extra space from PermissionSettings.js debug message. r=gwagner (abe2ac7574)
- Bug 1221104 - Revoke 'midi' permission queries with TypeError. r=baku (cce673498f)
- Bug 1221104 - Throw NS_ERROR_NOT_IMPLEMENTED instead of NS_ERROR_UNEXPECTED for PushPermissionDescriptor.userVisible. r=baku (face32ed7b)
- Bug 1228723 - Avoid a promise worker proxy deadlock caused by synchronous Push callbacks. r=catalinb (bd564a0483)
- Bug 1191931, Part 1 - Use tasks in the Push subscription tests. r=mt (3109fdf2af)
- Bug 1191931, Part 2 - Test resubscribing from a worker. r=m (9527fa2672)
- Bug 1243781 - Push methods called from a worker should reject with a `DOMException`. r=mt (f66818b161)
- Bug 1219064 - Add test for extendable pushsubscriptionchange event. r=mt (12af4b59dd)
- Bug 1176449 - Enter an update here to avoid assertions on startup. r=dbaron (1109cce81d)
- Bug 1239743: Do not allow windows to be resized to sizes above the maximum texture size. We don't know how to draw to these anyway. r=jimm (694dafd544)
- Remove some static_casting in CompositorParent. (bug 1245765 part 5, r=mattwoodrow) (4c7f39b18e)
- Bug 1133615 - Don't assert about the contents of RestyleData::mDescendants when in a full style rebuild. r=dbaron (2b071b90d2)
- Bug 1237902 (part 1) - Remove unneeded gfxContext ops in DrawTableBorderSegment(). r=roc. (8490ab67ca)
- Bug 1237902 (part 2) - Pass a DrawTarget to DrawTableBorderSegment(). r=roc. (c602535af0)
- Bug 1237902 (part 3) - Change the gfxContextMatrixAutoSaveRestore in PaintTableBorderBackground() to an AutoRestoreTransform. r=roc. (0b2412e7d6)
- Bug 1242164 - Remove the implementation of colspan=0 (which is now dead code). r=dbaron (88555a04a4)
- Bug 1235478 - Part 1: Rename eAdjustingTimer to eForceAdjustTimer. r=mchang (113a98fa28)
- Bug 1235478 - Part 2: Don't update mMostRecentRefresh when nsRefreshDriver::ScheduleViewManagerFlush is called. r=mchang (7fd8599b7b)
- Bug 1235478 - Part 3: Make weightmapping-12579.html fuzzy on MacOS 10.10. r=jdaggett (559683f95d)
- Bug 1234049 - Ensure we always invalidate new PresShells that are created for an inactive DocShell upon reactivating them. r=smaug (aeca3e08d9)
- Re-backout c216ff19d690 (bug 1059014 part 3) because the removed code is less dead than it first appears. (2cce434c50)
- Bug 1140264 part 1 - Avoid expanding auto-hidden ruby annotations. r=dbaron (5b6ddba10)
- Bug 1140264 part 2 - Move and merge line breaking code in rbc reflow to reduce useless computation and fix undesired break point. r=dbaron (0d3aaad79)
- Bug 1140264 part 3 - Rename IsInlineDescendantOfRuby to ShouldSuppressLineBreak and exclude rbc/rtc from it. r=dbaron (e929b296b)
- Bug 1140264 part 4 - Reftest for this bug. r=dbaron (3aa19d44e)
- Bug 1141842 - Add LastOptionalBreakPriority to nsLineLayout to simplify some code. r=roc (81cc1dcd0)
- Bug 1137875 - Have the SharedFrameMetricsData hold a copy of the layers id. r=nical (81c657510)
- Bug 1133237 - When transitioning from a shadow layer tree that has plugins to a tree that does not, make sure the old plugins get hidden properly. r=roc (11ff16c17)
- Bug 1137875 - Have the LayerTransactionChild hold a copy of the layers id. r=nical (f9a090aad)
- Bug 1137875 - Clear shared frame metrics objects associated with a PLayerTransaction when it is destroyed. r=nical (c5037ee27)
- Bug 1119878 Part 1: Change SandboxTarget to hold sandbox target services to provide functions. r=aklotz, r=glandium, r=cpearce (7378d13e4)
- Bug 1119878 Part 2: Change IPC code to hold ProcessID instead of ProcessHandle. r=billm, r=dvander, r=aklotz, r=cpearce (fa002f559)
- Bug 1149971 Part 1: Follow-up to bug 1119878 to fix broken IPDL tests. r=dvander (76b843d43)
and some lines of fix of toolkit/xre/nsEmbedFunctions.cpp after Bug 1119878 Part 2.