Bug 1966212 [wpt PR 52508] - Ability to check inline/float/OOF without LayoutObject bits.,

Automatic update from web-platform-tests
Ability to check inline/float/OOF without LayoutObject bits.

As pointed out in LayoutBox::IsValidColumnSpanner(), this function may
be called at "inconvenient" times, also before StyleDidChange() has
finished, so we cannot trust the LayoutObject bits for inline-level,
float, or position. Add the ability to provide this information without
checking those bits. The information we need is computed style and
layout object type.

It was possible for the function to return true for `column-span:all`
and `float:left`, which is wrong.

Bug: 417256483
Change-Id: Iaa8903a716a5f9a1d4cc18d42c48680e7fb2c551
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/6540050
Commit-Queue: Morten Stenshorne <mstenshochromium.org>
Reviewed-by: Ian Kilpatrick <ikilpatrickchromium.org>
Cr-Commit-Position: refs/heads/main{#1459638}

--

wpt-commits: d5e6a87919e3c8d6c1b52348ff17c64bde2ff849
wpt-pr: 52508

Differential Revision: https://phabricator.services.mozilla.com/D250156

UltraBlame original commit: f86e2afb99463200acdde9b6f7845f229aa0a21d

Author: marco-c

testing/web-platform/tests/css/css-multicol/crashtests/float-cannot-be-spanner.html

@@ -0,0 +1,123 @@
+<
+!
+DOCTYPE
+html
+>
+<
+link
+rel
+=
+"
+author
+"
+title
+=
+"
+Morten
+Stenshorne
+"
+href
+=
+"
+mailto
+:
+mstensho
+chromium
+.
+org
+"
+>
+<
+link
+rel
+=
+"
+help
+"
+href
+=
+"
+https
+:
+/
+/
+issues
+.
+chromium
+.
+org
+/
+issues
+/
+417256483
+"
+>
+<
+div
+style
+=
+"
+columns
+:
+2
+;
+"
+>
+<
+div
+id
+=
+"
+e59
+"
+style
+=
+"
+float
+:
+left
+;
+width
+:
+100px
+;
+column
+-
+span
+:
+all
+;
+"
+>
+<
+/
+div
+>
+m
+<
+/
+div
+>
+<
+script
+>
+document
+.
+body
+.
+offsetTop
+;
+e59
+.
+style
+.
+width
+=
+"
+101px
+"
+;
+<
+/
+script
+>