Security and patch rollup for FPR6 from ESR52

[classilla]

Through 9a0efbef2d0a

Not relevant:
M1433005 (code doesn't exist)

Not taking:
nothing yet

Deferred:
nothing yet

Candidates:
M1375217 https://hg.mozilla.org/releases/mozilla-esr52/rev/00fc630c9a46
(do separately due to regression risk and hacking required for esr45)
(see also M1348955)
M1434580 https://hg.mozilla.org/releases/mozilla-esr52/rev/198ad052621e
M1261175 https://hg.mozilla.org/releases/mozilla-esr52/rev/f0ec180993d2
and followup M1426087 https://hg.mozilla.org/releases/mozilla-esr52/rev/f0ec180993d2
M1426988 https://hg.mozilla.org/releases/mozilla-esr52/rev/9993a990e4af (can't hurt)

[classilla]

Through 01cc1b9f3bc6

Not relevant:
M1424709 (the nano allocator doesn't exist in 10.4 or 10.5)
M1440775 (fetch API not in 45)
M1434384 (code doesn't exist in 45)
M1442504 (no WebGL)

Not taking:
M1334465 (not e10s)
M1388020 (not e10s)
M1430173 (incomplete fix, doubtful Power Macs have enough timer resolution anyway)
M1438425 (not e10s)

Deferred:
M1430761 (deferred to #447)
M1398021 (we disabled most uses of lz4, but we might not have gotten it all)

Candidates:
M1416307 https://hg.mozilla.org/releases/mozilla-esr52/rev/54f2f7f93b30 (with change to SetOwner)
M1430557 https://hg.mozilla.org/releases/mozilla-esr52/rev/2c4d7a59041b
M1416529 https://hg.mozilla.org/releases/mozilla-esr52/rev/f87ef3774d5e
M1324042 https://hg.mozilla.org/releases/mozilla-esr52/rev/ac743923f81d
M1428947 https://hg.mozilla.org/releases/mozilla-esr52/rev/456913d7e8b5
M1437087 https://hg.mozilla.org/releases/mozilla-esr52/rev/014877bf17ea EditorBase->nsEditor, EditorEventListener->nsEditorEventListener
M1437507 https://hg.mozilla.org/releases/mozilla-esr52/rev/5b3a5de48912 (JS)
M1440926 https://hg.mozilla.org/releases/mozilla-esr52/rev/1df9b4404acd
M1425520 https://hg.mozilla.org/releases/mozilla-esr52/rev/4904c0f4a645
M1437450 https://hg.mozilla.org/releases/mozilla-esr52/rev/16b8073d5c30 (JS)