Protect DOM nodes in IndentOutdentCommand::tryIndentingAsListItem()
Protect DOM nodes in IndentOutdentCommand::tryIndentingAsListItem()

This patch changes IndentOutdentCommand::tryIndentingAsListItem() to use RefPtr<T> instead of raw pointer for Node and Element not to remove during insertNodeBefore() and moveParagraphWIthClones() calls, which can execute user script to remove DOM nodes.

Note: When I tried to run a test case created by cluster fuzz, content_shell doesn't fail. It is hard to create a test case by hand.

BUG=294456
TEST=ClusterFuzz

Review URL: https://codereview.chromium.org/25691002

git-svn-id: bf5cd6ccde378db821296732a091cfbcf5285fbd@158727 bbb929c8-8fbe-4397-9dbb-9b2b20218538

crosswalk-project/blink-crosswalk-efl,crosswalk-project/blink-crosswalk-efl,ondra-novak/blink,PeterWangIntel/blink-crosswalk,Pluto-tv/blink-crosswalk,modulexcite/blink,Bysmyyr/blink-crosswalk,Pluto-tv/blink-crosswalk,kurli/blink-crosswalk,crosswalk-project/blink-crosswalk-efl,modulexcite/blink,XiaosongWei/blink-crosswalk,jtg-gg/blink,XiaosongWei/blink-crosswalk,Pluto-tv/blink-crosswalk,nwjs/blink,smishenk/blink-crosswalk,modulexcite/blink,PeterWangIntel/blink-crosswalk,PeterWangIntel/blink-crosswalk,kurli/blink-crosswalk,PeterWangIntel/blink-crosswalk,jtg-gg/blink,crosswalk-project/blink-crosswalk-efl,crosswalk-project/blink-crosswalk-efl,hgl888/blink-crosswalk-efl,crosswalk-project/blink-crosswalk-efl,Pluto-tv/blink-crosswalk,Bysmyyr/blink-crosswalk,Pluto-tv/blink-crosswalk,Pluto-tv/blink-crosswalk,nwjs/blink,XiaosongWei/blink-crosswalk,kurli/blink-crosswalk,PeterWangIntel/blink-crosswalk,nwjs/blink,smishenk/blink-crosswalk,Bysmyyr/blink-crosswalk,jtg-gg/blink,crosswalk-project/blink-crosswalk-efl,Bysmyyr/blink-crosswalk,Bysmyyr/blink-crosswalk,jtg-gg/blink,smishenk/blink-crosswalk,XiaosongWei/blink-crosswalk,modulexcite/blink,hgl888/blink-crosswalk-efl,XiaosongWei/blink-crosswalk,XiaosongWei/blink-crosswalk,XiaosongWei/blink-crosswalk,XiaosongWei/blink-crosswalk,smishenk/blink-crosswalk,hgl888/blink-crosswalk-efl,hgl888/blink-crosswalk-efl,kurli/blink-crosswalk,PeterWangIntel/blink-crosswalk,ondra-novak/blink,modulexcite/blink,nwjs/blink,jtg-gg/blink,hgl888/blink-crosswalk-efl,smishenk/blink-crosswalk,modulexcite/blink,jtg-gg/blink,ondra-novak/blink,smishenk/blink-crosswalk,ondra-novak/blink,modulexcite/blink,PeterWangIntel/blink-crosswalk,jtg-gg/blink,PeterWangIntel/blink-crosswalk,nwjs/blink,kurli/blink-crosswalk,kurli/blink-crosswalk,nwjs/blink,jtg-gg/blink,ondra-novak/blink,crosswalk-project/blink-crosswalk-efl,Pluto-tv/blink-crosswalk,smishenk/blink-crosswalk,smishenk/blink-crosswalk,nwjs/blink,modulexcite/blink,XiaosongWei/blink-crosswalk,Bysmyyr/blink-crosswalk,Bysmyyr/blink-crosswalk,crosswalk-project/blink-crosswalk-efl,jtg-gg/blink,modulexcite/blink,kurli/blink-crosswalk,PeterWangIntel/blink-crosswalk,nwjs/blink,hgl888/blink-crosswalk-efl,Pluto-tv/blink-crosswalk,ondra-novak/blink,modulexcite/blink,kurli/blink-crosswalk,kurli/blink-crosswalk,jtg-gg/blink,ondra-novak/blink,Bysmyyr/blink-crosswalk,smishenk/blink-crosswalk,XiaosongWei/blink-crosswalk,Pluto-tv/blink-crosswalk,hgl888/blink-crosswalk-efl,ondra-novak/blink,hgl888/blink-crosswalk-efl,hgl888/blink-crosswalk-efl,Bysmyyr/blink-crosswalk,smishenk/blink-crosswalk,Bysmyyr/blink-crosswalk,nwjs/blink,PeterWangIntel/blink-crosswalk,hgl888/blink-crosswalk-efl,nwjs/blink,Pluto-tv/blink-crosswalk,ondra-novak/blink,kurli/blink-crosswalk