Created attachment 485641 [details] testcase (requires extension for GC) 1. Temporarily install 'DOM Fuzz Lite' from https://www.squarefree.com/extensions/domFuzzLite.xpi 2. Load the testcase. Result: ###!!! ASSERTION: No loadgroup for stylesheet; onload will fire early: 'loadGroup', file layout/style/Loader.cpp, line 1521 Preceded by the assertions in bug 605048. Is this an expected consequence of bug 605048?
Not obviously, no. How'd we end up with a document (and hence a CSSLoader) here at all? Shouldn't removing the frame from the DOM have torn down the document inside? Alternately, should the CSS loader make this assert a check-and-fail instead?
You need to log in before you can comment on or make changes to this bug.