I got an assert today in HTMLContentSink::AddDocTypeDecl Basically, we strip characters from a string, then get the first char at the string without checking it's length to see if it's non-zero. In some cases it may be zero length, and this is causing the assert. Will attach a patch shortly. Harish, can you review it? Or if you would prefer to check it in, that's great too. :)
I've heard of at least two other people who have fixes for this, one of which is better, so I'm going to close this one out (won't get lost because the asserts are too obvious!)
Asserts are fixed now.
updated qa contact.