Switch over to using XPCSafeJSObjectWrapper instead of trying to write it ourselves. bug 374071, r=crowder sr=darin

Fixing bug 384046. nsSVGOuterSVGFrame::Reflow should not call NotifyViewportChange unconditionally. r+sr=tor@acm.org

[OS/2] Bug 371505: check in preliminary workarounds for Thebes repaint problems based on ideas from Andy Willis

Bug 368869, suspect all native wrappers for cycle collection. Nth attempt, slightly safer.r=brendan, sr=jst

Don't allow loads to start in a docshell that's firing the unload event.  Alsodon't allow document.open of the document in that docshell.  Bug 371360,r=biesi, sr=jst

Bug 381888. Caret tracking broken with Windows screen readers [Cairo-related]. When a11y active, follow Gecko caret around with invisible system caret. r=surkov

Bug 384265. No accessible focus events fired during incremental find in an HTML <select>. r=mats, sr=neil