Bug 1718990 [wpt PR 29568] - Address crash when changing aria-owned parents for a...

Bug 1718990 [wpt PR 29568] - Address crash when changing aria-owned parents for a given node, a=testonly

Automatic update from web-platform-tests
Address crash when changing aria-owned parents for a given node

When changing from one aria-owned parent to another, do not first
RestoreParentOrPrune() as we normally would when *removing* aria-owns.
That method usually restores the natural parent, but it can also
remove the child when it's in a subtree that cannot have descendants,
e.g. when AXNodeObject::CanHaveChildren() returns false.

Bug: 1225582
Change-Id: I21d4e0ef2ed195a5a372c076df4357c781012c7b
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/3002626
Commit-Queue: Daniel Libby <dlibby@microsoft.com>
Auto-Submit: Aaron Leventhal <aleventhal@chromium.org>
Reviewed-by: Daniel Libby <dlibby@microsoft.com>
Cr-Commit-Position: refs/heads/master@{#899228}

--

wpt-commits: 8ee764101e28e3215a29808cb2c490f2be799416
wpt-pr: 29568