Weekly browser binaries (20211030)

New NewMoon 27 Build!

32bit https://o.rthost.win/palemoon/palemoon-27.10.0.win32-git-20211030-2087e70e1-xpmod.7z
32bit SSE https://o.rthost.win/palemoon/palemoon-27.10.0.win32-git-20211030-2087e70e1-xpmod-sse.7z
32bit noSSE https://o.rthost.win/palemoon/palemoon-27.10.0.win32-git-20211030-2087e70e1-xpmod-ia32.7z

64bit https://o.rthost.win/palemoon/palemoon-27.10.0.win64-git-20211030-2087e70e1-xpmod.7z

source repo: https://github.com/roytam1/palemoon27

repo changes since my last build:
- import changes from `dev' branch of rmottola/Arctic-Fox:
 - Bug 1167248: Test whether mysterious rand_s failures are due to LoadLibraryExW hooks. rs=terrence (4c38bf34b)
 - Bug 1176289 - Record proper optimization tracking outcome on failure of getPropTryConstant due to non-singleton value. r=shu (6a718490e)
 - Bug 1180013 - Fix irregexp on ARM64. r=efaust (88bb8599a)
 - Bug 1163891 - Read lines of input in xpcshell/jsshell while properly handling EINTR failures and retrying in response. r=glandium (c84415384)
 - Bug 1176890 - Start running jstests faster on windows; r=sfink (f878247e4)
 - No Bug - Fix test count generation when jit-flags is set; r=meow (9f90cbd6e)
 - Bug 1177801 - Remove NewObjectWithProto. r=bhackett (64a29265e)
 - Bug 1179315 - part 1 - make TypedArrayLayout's constructor inline and MOZ_CONSTEXPR; r=lth (e7da1ad42)
 - Bug 1179315 - part 2 - make it more obvious that typeIDs of typed arrays are constants; r=lth (796348a4d)
 - Bug 1197316 - Remove PR_snprintf calls in xpcom/. r=froydnj (1c775e4c0)
 - Bug 1210607 - Check for null compartment in PopulateReportBlame() r=terrence (4b19494a2)
 - Bug 1145636 - Update jsapi-tests/README. (The functional change is where it talks about the Makefile; that was stale.) r=Waldo. (b0cd84037)
 - Bug 1123875 - Add a test for strict assignment to a readonly WebIDL attribute. r=peterv. (1c8f5fae8)
 - Bug 1145218 - Require a new float manager if a block frame has a different writing-mode to its parent's. r=dbaron (7ebcd8fab)
 - Bug 1150151 - Set leak threshold for reftests (r=mccr8) (19cb1a82e)
 - Bug 1149781; Update Oculus runtime for new SDK 0.5; r=jrmuizel (aea8b2c31)
 - Bug 1149781; [webvr] Update Oculus API to use 0.5.x SDK; Mac startup crash fix; r=dbaron, a=startup-crash (ad874bd1b)
 - Bug 1145936 - Fix sizing of foreignObject with vertical writing mode. r=smontagu (059e46e95) (f0504b101)
- import changes from `dev' branch of rmottola/Arctic-Fox:
 - Bug 1118272 - Hold a cpu wakelock for async call "AlarmsManager.add". r=fabrice (2e04b9b47)
 - Bug 1146754 - Reftest for selection highlighting of trailing space. r=mats (5b9083192)
 - Bug 1146754 - Fix reftests for selected shadowed text to avoid trailing-space issues. r=mats (727f06840)
 - Bug 1146754 - Show selection highlighting for trailing space. r=mats (16955b975)
 - Bug 1146754 followup - Add a little fuzz to the testcase for OS X 10.10. no_r=me (31efb0691)
 - Bug 1148376 - Only force-enable layers acceleration on Gonk. r=jmuizelaar (28bdfa602)
 - Bug 1149519 - Workaround for GDI's failure to return empty extents for blank glyphs. r=roc (0467912a9)
 - Bug 1174230 - Limit the complexity of regalloc bundles which can be merged together, r=sunfish. (929511dd4)
 - Bug 1029483 - Fix various 99ch style violations in Intl.cpp. r=sparky (9f5de7ea9)
 - Bug 1093421 - Add a test for support for currencyDisplay: 'name' or 'code' when formatting numbers. r=abargull (1107405c5)
 - Bug 946528 - Update the default number of digits of precision in numbers formatted as CLF currency (Chile's Unidad de Fomento) in the Intl API. r=abargull (268fbd219)
 - Bug 1177898 - Fix error checking in CloneFunctionObjectIfNotSingleton. (r=efaust) (e8509a49e)
 - Bug 866596 - Properly reject locales with duplicate singletons or variants as invalid within the Intl API. r=abargull (edc6917a8)
 - Bug 866596 - Properly reject locales with duplicate singletons or variants as invalid within the Intl API. r=abargull (0c0bfe280)
 - pointer style (c6953c513)
 - Bug 1178976: Add a post-write barrier to ObjectWeakMap::add. r=terrence (89b9a7b2f)
 - Bug 1177941 - Do not show warning about unreachable empty statement after return statement. r=Waldo (f661cf694)
 - spaces, pointer style (c22647ade)
 - Bug 1161351 - Fix unwound exit frame sizes in JitProfilingFrameIterator. (r=nbp) (d5f415602)
 - Bug 1172498 - Properly mark ion frame new.target values. (r=jandem) (a2fc125ec)
 - Bug 1163520: Make IsInternalFunctionObject take its argument by reference, as it must not be nullptr. r=shu (f02635f28)
 - Bug 1163520: Don't hand out internal function objects via Debugger.Environment.prototype.callee. r=shu (13ac48c56) (e39070aba)
- ported changes from mozilla upstream: Bug 1250589 - Remove the must-be-parenthesized requirement from yield expressions. r=waldo (4f327d0de)
- import changes from `dev' branch of rmottola/Arctic-Fox:
 - Bug 1175347 - Add a JSAPI test for exposing availability of locales derived from the default locale. r=itsatest, rs=till over IRL (0bba85db1)
 - Bug 1175347 - Fix a test that assumes too much in compacting builds. r=intermittent-orange in a CLOSED TREE (b2992b31c)
 - Bug 1171180 - Remove trunc from jsmath; r=jorendorff (0e8913338)
 - Bug 1176864 - Truncate modulo operator for int32 r=h4writer, r=nbp (5de9c5340)
 - Bug 1166790 - Remove old Statistics formatting code; r=sfink (6abc54dab)
 - Bug 1171612 - Use C++11 features to make Statistics module nicer; r=sfink (d0cfef988)
 - Bug 1132208 - "Remove dead code from framerate actor now in GraphsWorker.js". r=jsantell (4bfaf2773)
 - Bug 1146237 - FramerateActor should use docShell.now() rather than performance.now so that page refreshes do not break it. r=vp (a0d3fbd28)
 - Bug 1134079 - Supply audio node definitions directly from the client if the webaudio actor server does not support it (like on older versions of FxOS). r=vp (95f728d47)
 - Bug 1172183 - Pull out the implementation of FramerateActor so that it can be consumed by other actors. r=vp (1c3f0d82a)
 - Bug 1172182 - Pull out memory utility logic out of the MemoryActor so other actors can consume it. r=vp (851d1cce3)
 - Bug 1172182 part 2: correctly link to the memory module via timeline actor. r=vp (3714663db)
 - Bug 1172184 - Pull out logic from TimelineActor into a standalone module that can be consumed by other actors. (031127dc0)
 - partial of Bug 1159506 - Make GC events use TimeStamp. r=terrence (99fa0378f)
 - Bug 1035973 - Add DebuggerObject.getOwnPropertySymbols; r=fitzgen (fd10482d5)
 - Bug 1174712 - Tolerate singleton objects with uncacheable prototypes in Ion caches, r=jandem. (7c3ce4fdc)
 - add limits for numeric_limits (67b09aa7f)
 - Bug 811911 - Use UTF-8 output for TwoByte chars in Error objects; r=jandem (2fd3cf6cd)
 - Fix the test for bug 1173787 to work even when the filename contains a ':' (e.g. on Windows) so we can reopen the CLOSED TREE (b42aa3b92)
 - Bug 1100498 - Report function names for addon exceptions. r=billm (dfa69d830)
 - Bug 1170840 - Add testbed allocator for new regalloc features, and use for a change to hot/cold code bundle splitting, r=sunfish. (95c484a37)
 - Bug 1174542 - Remove unnecessary AutoWritabeJitCode from initTraceLogger. r=luke (a427e979c)
 - Bug 1173529: IonMonkey - Also iterate phis when removing guards, r=nbp (055a5dcd7)
 - Bug 1114079 - Fix overrecursion check in nsGlobalWindow::SetNewDocument to not report a JS exception. r=bz (7c0ba0677)
 - Bug 1172513 part 1. Fix shell's Evaluate to actually throw when it detects save/load bytecode mismatches. r=waldo (5f5ccc094)
 - Bug 1172513 part 2. When XDR-encoding a function, don't incode temporary flags. r=waldo (404fa1939)
 - Bug 1171430 - Do not poison the nursery's chunk kind marker; r=terrence (248667fc9)
 - Bug 1171430 - Don't shift the poison value by non-byte values; r=jonco (320ba4ba0)
 - Bug 1173908 - Fix an MSVC warning about negating an unsigned integer; r=nbp (3244fd56c)
 - Bug 1172545 - Recover from OOM if Ion compilation is skipped due to not being able to allocate a 'this' object, r=jandem. (918025215) (00ce1ce6f)
- import changes from `dev' branch of rmottola/Arctic-Fox:
 - Bug 1125481 - Replace FunctionInfo macros by variadic templates. r=Waldo (83244859f)
 - Bug 1125481 - FunctionInfo: Remove useless inline keywords. r=Waldo (a13a186af)
 - Bug 1169769 - Stop pretending js/src is a top-level directory. r=gps (2ba218bbf)
 - Bug 1132189 - Rename "Analysis Helper" thread. r=bhackett (1a6b50af5)
 - Bug 1172824: Initialize a few more members in VerifyPreTracer (CID 1304706); r=terrence (9fb0f4b03)
 - Bug 1172824: Close dumpFile in case of error in DumpHeap (CID 1302587); r=jonco (e552f4320)
 - Bug 1172641 - Fix class tests to not fail on builds where classes are not enabled r=shu (56474b665)
 - Bug 1153244 - increase JS helper threads stack space when MOZ_TSAN is enabled; r=bhackett (cb5c9fc01)
 - Bug 1172895: Raise the stack size limit for JS helper threads; r=bhackett (750cc5e19)
 - Bug 1166101 - redirect aka os.file.redirect should not be available in fuzzing mode (09f574daa)
 - Bug 1139376: Ionmonkey - Make removing of guards aware of phis, r=nbp (fb7cb028b)
 - Bug 1171722 - Part 1: Add gcreason to GCSliceCallback. r=fitzgen (a9e4ae93b)
 - Bug 1171722 - Part 2: Add gcreason::XPCONNECT_SHUTDOWN. r=terrence (815cbd630)
 - Bug 1171722 - Part 3: Specify gcreason::XPCONNECT_SHUTDOWN during xpconnect shutdown. r=mccr8 (5123cda83)
 - Bug 1171722 - Part 4: Don't warn if DebuggerOnGCRunnable::Enqueue fails during shutdown. r=mccr8 (efc3b8aab)
 - Bug 1173513 - Point to SavedFrame.md docs from JSAPI comments; r=fitzgen (6c9bb84db)
 - No Bug - Remove an unneeded annotation DONTBUILD; r=sfink (05fe03101)
 - Bug 1171871 - Fix bytecode documentation comment for JSOP_NEWTARGET. r=efaust (bacbef1ce)
 - Bug 1169460 - Fix imprecise computation in BacktrackingAllocator::minimalUse, r=sunfish. (7ea535e67)
 - Bug 1170959 - Remove JS_GetPropertyDescriptor from a JSAPI test. r=efaust (8745b6d04) (e361c5511)
- ported dependency of "Bug 1174307 - Add some internal content policy types for the purpose of reflecting them on RequestContex", some part may already in the tree:
 - Bug 1175114 - Translate the content policy type obtained in CSPService::AsyncOnChannelRedirect to an external one before invoking the content policy implementation; r=smaug
 - Bug 1175122 - Add more assertions to the in-tree content policy implementations to ensure that they receive external content policy types; r=baku
 - Bug 1178339 - Account for service workers separately in WorkerDomainInfo; r=nsm (4e0540b82)
- ported follow-ups of "Bug 1143922 - Add AsyncOpen2 to nsIChannel and perform security checks when opening a channel - scriptSecurityManager changes (r=sicking,bholley)":
 - Bug 1184387 - Bail out of file:// loads for all non-chrome:// URIs. r=Gijs
 - Bug 1224046 - Remove <base href> from directory listings. r=mcmanus (dbff70221)
- ported 2 commits from mozilla upstream to fix ask-to-activate plugin issue:
 - Bug 1232903 - Skip Security checks if triggeringPrincipal is SystemPrincipal (r=sicking)
 - Bug 1257650 - Skip Security checks if triggeringPrincipal is SystemPrincipal only for subresource loads. r=sicking (2087e70e1)

---

New regular/weekly KM-Goanna release:
https://o.rthost.win/kmeleon/KM76.4.5-Goanna-20211030.7z

Changelog:

Out-of-tree changes:
* update Goanna3 to git 06f122f42...2087e70e1:
- import changes from `dev' branch of rmottola/Arctic-Fox:
 - Bug 1167248: Test whether mysterious rand_s failures are due to LoadLibraryExW hooks. rs=terrence (4c38bf34b)
 - Bug 1176289 - Record proper optimization tracking outcome on failure of getPropTryConstant due to non-singleton value. r=shu (6a718490e)
 - Bug 1180013 - Fix irregexp on ARM64. r=efaust (88bb8599a)
 - Bug 1163891 - Read lines of input in xpcshell/jsshell while properly handling EINTR failures and retrying in response. r=glandium (c84415384)
 - Bug 1176890 - Start running jstests faster on windows; r=sfink (f878247e4)
 - No Bug - Fix test count generation when jit-flags is set; r=meow (9f90cbd6e)
 - Bug 1177801 - Remove NewObjectWithProto. r=bhackett (64a29265e)
 - Bug 1179315 - part 1 - make TypedArrayLayout's constructor inline and MOZ_CONSTEXPR; r=lth (e7da1ad42)
 - Bug 1179315 - part 2 - make it more obvious that typeIDs of typed arrays are constants; r=lth (796348a4d)
 - Bug 1197316 - Remove PR_snprintf calls in xpcom/. r=froydnj (1c775e4c0)
 - Bug 1210607 - Check for null compartment in PopulateReportBlame() r=terrence (4b19494a2)
 - Bug 1145636 - Update jsapi-tests/README. (The functional change is where it talks about the Makefile; that was stale.) r=Waldo. (b0cd84037)
 - Bug 1123875 - Add a test for strict assignment to a readonly WebIDL attribute. r=peterv. (1c8f5fae8)
 - Bug 1145218 - Require a new float manager if a block frame has a different writing-mode to its parent's. r=dbaron (7ebcd8fab)
 - Bug 1150151 - Set leak threshold for reftests (r=mccr8) (19cb1a82e)
 - Bug 1149781; Update Oculus runtime for new SDK 0.5; r=jrmuizel (aea8b2c31)
 - Bug 1149781; [webvr] Update Oculus API to use 0.5.x SDK; Mac startup crash fix; r=dbaron, a=startup-crash (ad874bd1b)
 - Bug 1145936 - Fix sizing of foreignObject with vertical writing mode. r=smontagu (059e46e95) (f0504b101)
- import changes from `dev' branch of rmottola/Arctic-Fox:
 - Bug 1118272 - Hold a cpu wakelock for async call "AlarmsManager.add". r=fabrice (2e04b9b47)
 - Bug 1146754 - Reftest for selection highlighting of trailing space. r=mats (5b9083192)
 - Bug 1146754 - Fix reftests for selected shadowed text to avoid trailing-space issues. r=mats (727f06840)
 - Bug 1146754 - Show selection highlighting for trailing space. r=mats (16955b975)
 - Bug 1146754 followup - Add a little fuzz to the testcase for OS X 10.10. no_r=me (31efb0691)
 - Bug 1148376 - Only force-enable layers acceleration on Gonk. r=jmuizelaar (28bdfa602)
 - Bug 1149519 - Workaround for GDI's failure to return empty extents for blank glyphs. r=roc (0467912a9)
 - Bug 1174230 - Limit the complexity of regalloc bundles which can be merged together, r=sunfish. (929511dd4)
 - Bug 1029483 - Fix various 99ch style violations in Intl.cpp. r=sparky (9f5de7ea9)
 - Bug 1093421 - Add a test for support for currencyDisplay: 'name' or 'code' when formatting numbers. r=abargull (1107405c5)
 - Bug 946528 - Update the default number of digits of precision in numbers formatted as CLF currency (Chile's Unidad de Fomento) in the Intl API. r=abargull (268fbd219)
 - Bug 1177898 - Fix error checking in CloneFunctionObjectIfNotSingleton. (r=efaust) (e8509a49e)
 - Bug 866596 - Properly reject locales with duplicate singletons or variants as invalid within the Intl API. r=abargull (edc6917a8)
 - Bug 866596 - Properly reject locales with duplicate singletons or variants as invalid within the Intl API. r=abargull (0c0bfe280)
 - pointer style (c6953c513)
 - Bug 1178976: Add a post-write barrier to ObjectWeakMap::add. r=terrence (89b9a7b2f)
 - Bug 1177941 - Do not show warning about unreachable empty statement after return statement. r=Waldo (f661cf694)
 - spaces, pointer style (c22647ade)
 - Bug 1161351 - Fix unwound exit frame sizes in JitProfilingFrameIterator. (r=nbp) (d5f415602)
 - Bug 1172498 - Properly mark ion frame new.target values. (r=jandem) (a2fc125ec)
 - Bug 1163520: Make IsInternalFunctionObject take its argument by reference, as it must not be nullptr. r=shu (f02635f28)
 - Bug 1163520: Don't hand out internal function objects via Debugger.Environment.prototype.callee. r=shu (13ac48c56) (e39070aba)
- ported changes from mozilla upstream: Bug 1250589 - Remove the must-be-parenthesized requirement from yield expressions. r=waldo (4f327d0de)
- import changes from `dev' branch of rmottola/Arctic-Fox:
 - Bug 1175347 - Add a JSAPI test for exposing availability of locales derived from the default locale. r=itsatest, rs=till over IRL (0bba85db1)
 - Bug 1175347 - Fix a test that assumes too much in compacting builds. r=intermittent-orange in a CLOSED TREE (b2992b31c)
 - Bug 1171180 - Remove trunc from jsmath; r=jorendorff (0e8913338)
 - Bug 1176864 - Truncate modulo operator for int32 r=h4writer, r=nbp (5de9c5340)
 - Bug 1166790 - Remove old Statistics formatting code; r=sfink (6abc54dab)
 - Bug 1171612 - Use C++11 features to make Statistics module nicer; r=sfink (d0cfef988)
 - Bug 1132208 - "Remove dead code from framerate actor now in GraphsWorker.js". r=jsantell (4bfaf2773)
 - Bug 1146237 - FramerateActor should use docShell.now() rather than performance.now so that page refreshes do not break it. r=vp (a0d3fbd28)
 - Bug 1134079 - Supply audio node definitions directly from the client if the webaudio actor server does not support it (like on older versions of FxOS). r=vp (95f728d47)
 - Bug 1172183 - Pull out the implementation of FramerateActor so that it can be consumed by other actors. r=vp (1c3f0d82a)
 - Bug 1172182 - Pull out memory utility logic out of the MemoryActor so other actors can consume it. r=vp (851d1cce3)
 - Bug 1172182 part 2: correctly link to the memory module via timeline actor. r=vp (3714663db)
 - Bug 1172184 - Pull out logic from TimelineActor into a standalone module that can be consumed by other actors. (031127dc0)
 - partial of Bug 1159506 - Make GC events use TimeStamp. r=terrence (99fa0378f)
 - Bug 1035973 - Add DebuggerObject.getOwnPropertySymbols; r=fitzgen (fd10482d5)
 - Bug 1174712 - Tolerate singleton objects with uncacheable prototypes in Ion caches, r=jandem. (7c3ce4fdc)
 - add limits for numeric_limits (67b09aa7f)
 - Bug 811911 - Use UTF-8 output for TwoByte chars in Error objects; r=jandem (2fd3cf6cd)
 - Fix the test for bug 1173787 to work even when the filename contains a ':' (e.g. on Windows) so we can reopen the CLOSED TREE (b42aa3b92)
 - Bug 1100498 - Report function names for addon exceptions. r=billm (dfa69d830)
 - Bug 1170840 - Add testbed allocator for new regalloc features, and use for a change to hot/cold code bundle splitting, r=sunfish. (95c484a37)
 - Bug 1174542 - Remove unnecessary AutoWritabeJitCode from initTraceLogger. r=luke (a427e979c)
 - Bug 1173529: IonMonkey - Also iterate phis when removing guards, r=nbp (055a5dcd7)
 - Bug 1114079 - Fix overrecursion check in nsGlobalWindow::SetNewDocument to not report a JS exception. r=bz (7c0ba0677)
 - Bug 1172513 part 1. Fix shell's Evaluate to actually throw when it detects save/load bytecode mismatches. r=waldo (5f5ccc094)
 - Bug 1172513 part 2. When XDR-encoding a function, don't incode temporary flags. r=waldo (404fa1939)
 - Bug 1171430 - Do not poison the nursery's chunk kind marker; r=terrence (248667fc9)
 - Bug 1171430 - Don't shift the poison value by non-byte values; r=jonco (320ba4ba0)
 - Bug 1173908 - Fix an MSVC warning about negating an unsigned integer; r=nbp (3244fd56c)
 - Bug 1172545 - Recover from OOM if Ion compilation is skipped due to not being able to allocate a 'this' object, r=jandem. (918025215) (00ce1ce6f)
- import changes from `dev' branch of rmottola/Arctic-Fox:
 - Bug 1125481 - Replace FunctionInfo macros by variadic templates. r=Waldo (83244859f)
 - Bug 1125481 - FunctionInfo: Remove useless inline keywords. r=Waldo (a13a186af)
 - Bug 1169769 - Stop pretending js/src is a top-level directory. r=gps (2ba218bbf)
 - Bug 1132189 - Rename "Analysis Helper" thread. r=bhackett (1a6b50af5)
 - Bug 1172824: Initialize a few more members in VerifyPreTracer (CID 1304706); r=terrence (9fb0f4b03)
 - Bug 1172824: Close dumpFile in case of error in DumpHeap (CID 1302587); r=jonco (e552f4320)
 - Bug 1172641 - Fix class tests to not fail on builds where classes are not enabled r=shu (56474b665)
 - Bug 1153244 - increase JS helper threads stack space when MOZ_TSAN is enabled; r=bhackett (cb5c9fc01)
 - Bug 1172895: Raise the stack size limit for JS helper threads; r=bhackett (750cc5e19)
 - Bug 1166101 - redirect aka os.file.redirect should not be available in fuzzing mode (09f574daa)
 - Bug 1139376: Ionmonkey - Make removing of guards aware of phis, r=nbp (fb7cb028b)
 - Bug 1171722 - Part 1: Add gcreason to GCSliceCallback. r=fitzgen (a9e4ae93b)
 - Bug 1171722 - Part 2: Add gcreason::XPCONNECT_SHUTDOWN. r=terrence (815cbd630)
 - Bug 1171722 - Part 3: Specify gcreason::XPCONNECT_SHUTDOWN during xpconnect shutdown. r=mccr8 (5123cda83)
 - Bug 1171722 - Part 4: Don't warn if DebuggerOnGCRunnable::Enqueue fails during shutdown. r=mccr8 (efc3b8aab)
 - Bug 1173513 - Point to SavedFrame.md docs from JSAPI comments; r=fitzgen (6c9bb84db)
 - No Bug - Remove an unneeded annotation DONTBUILD; r=sfink (05fe03101)
 - Bug 1171871 - Fix bytecode documentation comment for JSOP_NEWTARGET. r=efaust (bacbef1ce)
 - Bug 1169460 - Fix imprecise computation in BacktrackingAllocator::minimalUse, r=sunfish. (7ea535e67)
 - Bug 1170959 - Remove JS_GetPropertyDescriptor from a JSAPI test. r=efaust (8745b6d04) (e361c5511)
- ported dependency of "Bug 1174307 - Add some internal content policy types for the purpose of reflecting them on RequestContex", some part may already in the tree:
 - Bug 1175114 - Translate the content policy type obtained in CSPService::AsyncOnChannelRedirect to an external one before invoking the content policy implementation; r=smaug
 - Bug 1175122 - Add more assertions to the in-tree content policy implementations to ensure that they receive external content policy types; r=baku
 - Bug 1178339 - Account for service workers separately in WorkerDomainInfo; r=nsm (4e0540b82)
- ported follow-ups of "Bug 1143922 - Add AsyncOpen2 to nsIChannel and perform security checks when opening a channel - scriptSecurityManager changes (r=sicking,bholley)":
 - Bug 1184387 - Bail out of file:// loads for all non-chrome:// URIs. r=Gijs
 - Bug 1224046 - Remove <base href> from directory listings. r=mcmanus (dbff70221)
- ported 2 commits from mozilla upstream to fix ask-to-activate plugin issue:
 - Bug 1232903 - Skip Security checks if triggeringPrincipal is SystemPrincipal (r=sicking)
 - Bug 1257650 - Skip Security checks if triggeringPrincipal is SystemPrincipal only for subresource loads. r=sicking (2087e70e1)

* Notice: the changelog above may not always applicable to XULRunner code which K-Meleon uses.

A goanna3 source tree that has kmeleon adaption patch applied is available here: https://github.com/roytam1/palemoon27/tree/kmeleon76