Security and patch rollup for FPR4 from ESR52

[classilla]

Through 8632daab35b0

Not relevant:
M1367482 (Windows)
M1359624 (Sierra only)
M1376163 (High Sierra only)
M1392988 (High Sierra only)
M1389908 (High Sierra only)
M1394530 (code doesn't exist)
M1357593 (we pass our test suite spank you very much)
M1339259 (Windows)

Not taking:
M1369561 Linux only, doesn't even run
M1375146 not a shipped configuration
M1394265 not a shipped configuration

Candidates:
M1395138 https://hg.mozilla.org/releases/mozilla-esr52/rev/98b3988592a6
M1400554 https://hg.mozilla.org/releases/mozilla-esr52/rev/349acf56ff49
M1400003 https://hg.mozilla.org/releases/mozilla-esr52/rev/3af5bf8bdea0
M1407751 https://hg.mozilla.org/releases/mozilla-esr52/rev/592df6088926
M1261175 https://hg.mozilla.org/releases/mozilla-esr52/rev/77a2d4610275

[classilla]

Through 72c8729fd248

Not relevant:
M1343147 (not in code)
M1387799 (not in code)
M1401804 (not in code. second part is possibly relevant but may not be needed)
M1350917 (we don't use breakpad)
M1404910 (not in code)
M1405151 (not a shipped configuration, we don't use crash reporter)
M1350564 (needed for M1348660 etc., not in code)

Not taking:
M1348660/M1047098/M1355576 (service workers will not be supported or enabled, regression risks e.g. M1404105)
M1404787 (don't care)
M1415133 (don't care)

Deferred:
M1411957: this is not a major issue for most users, but we need to do it. I will spin this into its own issue for FPR5. We need to get intl/icu/source/tools/tzcode/ working since the old zoneinfo64.txt file is no longer updated and we cannot update to the current in-tree ICU without substantial additional rework.

Candidates:
M1397811 https://hg.mozilla.org/releases/mozilla-esr52/rev/d6f008f95598
M1407740 https://hg.mozilla.org/releases/mozilla-esr52/rev/ab9b51cd75ac
M1408005 https://hg.mozilla.org/releases/mozilla-esr52/rev/df49c25e6e4c
M1411458 https://hg.mozilla.org/releases/mozilla-esr52/rev/3b899f872623
M1408412 https://hg.mozilla.org/releases/mozilla-esr52/rev/8426754b7130 (JS)
M1406750 https://hg.mozilla.org/releases/mozilla-esr52/rev/5ddd5d2aa769
(take M1306626 https://hg.mozilla.org/mozilla-central/rev/b7cb15d415ee) (if possible) (JS)
then
M1404636 https://hg.mozilla.org/releases/mozilla-esr52/rev/dd068f4e132a (JS)
M1406398 https://hg.mozilla.org/releases/mozilla-esr52/rev/e6bd533b57e9 (JS)
M1412252 https://hg.mozilla.org/releases/mozilla-esr52/rev/2f48c03d9b3f
M1400763 https://hg.mozilla.org/releases/mozilla-esr52/rev/de336078d36b