Bug 41456: Backport ESR 102.5 security fixes to 91.13-based Tor Browser

A bucket of backports:

• CVE-2022-45403: Service Workers might have learned size of cross-origin media files
  • backport: richard/tor-browser@1846b250
  • esr102: 991ebc73
• CVE-2022-45404: Fullscreen notification bypass
  • backport: richard/tor-browser@f72260fb
  • esr102: ee3c8cbd
• CVE-2022-45405: Use-after-free in InputStream implementation
  • backport: richard/tor-browser@40b1a378
  • esr102: 86f741ce
• CVE-2022-45406: Use-after-free of a JavaScript Realm
  • backport: richard/tor-browser@7a592af7
  • esr102: bdedfc85
• CVE-2022-45408: Fullscreen notification bypass via windowName
  • backport: richard/tor-browser@8bd3bd20
  • esr102: 098816c1
• CVE-2022-45409: Use-after-free in Garbage Collection
  • NOTE: did not apply cleanly maybe we should drop vOv
  • backport: richard/tor-browser@389a125c
  • esr102: e958d81b
• CVE-2022-45410: ServiceWorker-intercepted requests bypassed SameSite cookie policy
  • backport: richard/tor-browser@c2811c81
  • esr102: 566f5b90
• CVE-2022-45411: Cross-Site Tracing was possible via non-standard override headers
  • backport: richard/tor-browser@3a9d2139, richard/tor-browser@22e361ad
  • esr102: 7541c173, 2453c172
• CVE-2022-45412: Symlinks may resolve to partially uninitialized buffers
  • backport: richard/tor-browser@a79c58b0
  • esr102: b7cb6cf4
• CVE-2022-45416: Keystroke Side-Channel Leakage
  • backport: richard/tor-browser@2885a2cf
  • esr102: 1f8f2744
• CVE-2022-45418: Custom mouse cursor could have been drawn over browser UI: too much code churn to apply
• CVE-2022-45420: Iframe contents could be rendered outside the iframe
  • NOTE: did not apply cleanly, but only because the relevant code was moved, manual merge worked and fix can be verified here: https://people.torproject.org/~richard/1792643/main.html
  • backport: richard/tor-browser@be6e2ad7
  • esr102: 9197bcb4
• CVE-2022-45421: Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5
  • 1794061: too much code churn to apply
  • 1767920
    • backport: richard/tor-browser@676b50fe
    • esr102: 8cf04310
  • 1789808:
    • backport: richard/tor-browser@e75d285b
    • esr102: 61f610c4