Security and patch rollup for FPR14 from ESR60

[classilla]

No candidates yet for beta.

[classilla]

M1538006 is already down.
M1537924 is already down.

[classilla]

Through a096a8ee118db4fcd39b7dbf4e963c96a795bb4b

Not relevant:
M1535518 (Skia)
M1532553 (feature not implemented)
M1535612 (Servo)
M1535194 (ARM)
M1534749 (not in code)
M1533554 (Windows)
M1535794 (not implemented)
M1534196 (Windows)
M1524478 (not implemented)
M1542581 (not implemented)
M1539110 (TB)
M1542907 (not implemented)
M1532525 (Linux)
M1542907 (not in code)

Not taking:
M1540017 (don't care)
M1541580. The underlying issue is there but unclear if this fixes anything on 45. It also changes some code semantics, and we don't have M1339411 which seems to have exposed the underlying issue.
M1524089 (don't care)
M1527766 (don't care)
M1523810 (don't care)
M1526439 (don't care)
M1518663 (don't care)

Deferred:
M1536405. The exploit is difficult but might be made to work on 45. However, this fix requires the docshell be cycle collected, i.e., M1401379, and has significant regression risk. This is desirable but not appropriate for FPR14 final.
M1534593. May not be exploitable on 45. Part 3 n/a. Part 1 requires M1411415 and part 2 is scary.
M1545120. Must be fixing something but not sure what.
M1543641. Need to figure out how to do the ICU updates again.

Candidates:
M1531346 https://hg.mozilla.org/releases/mozilla-esr60/rev/6420d2cb2fce
M1532465 https://hg.mozilla.org/releases/mozilla-esr60/rev/5e6590420e9c
M1538042 https://hg.mozilla.org/releases/mozilla-esr60/rev/4774268f333c (embedding/components/find) (IDL)
M1540166 https://hg.mozilla.org/releases/mozilla-esr60/rev/7ac782fad9d2
M1516325 -DFD_SETSIZE=10240 -D_DARWIN_UNLIMITED_SELECT to compiler string in nspr configure.in. Not sure how much this will fix though. (MAC ONLY)
M1536768 https://hg.mozilla.org/releases/mozilla-esr60/rev/303fa85d8f89 https://hg.mozilla.org/releases/mozilla-esr60/rev/c9328455c9c1 (JS)
M1542829 https://hg.mozilla.org/releases/mozilla-esr60/rev/aca2f0b39735
M1544670 https://hg.mozilla.org/releases/mozilla-esr60/rev/ec1ce458482f (bindings)
M1543617 https://hg.mozilla.org/releases/mozilla-beta/rev/15baf86bf317
M1543694 add text/x-moz-place to list in /dom/events/DataTransfer.cpp::SetDataAtInternal
M1538619 https://hg.mozilla.org/releases/mozilla-esr60/rev/fac75272fedd without aSendPreprocessInfo
M1538736 https://hg.mozilla.org/releases/mozilla-esr60/rev/bf58b3f239fe
M1546327 https://hg.mozilla.org/releases/mozilla-esr60/rev/a096a8ee118db4fcd39b7dbf4e963c96a795bb4b

[classilla]

Through 5749f5b42cbf5a972bc8c398ed377977da35dbd2

Not relevant:
M1521370 (Windows)
M1549010 (we don't verify add-ons ha ha ha)
M1549061 (we still don't verify add-ons)
M1549249 (we definitely still don't verify add-ons)
M1546836 (unaffected)

[classilla]

Spinning off M1502799 to #557.

[classilla]

We are unaffected by M1546544.

[classilla]

Done.