I found a nice <use> crash - marking as P1 as we have a beta out with it. I didn't investigate further so far. Attaching testcase.
Created attachment 15129 [details] Initial patch
(In reply to comment #1) > Created an attachment (id=15129) [edit] > Initial patch That looks more like a test case than a patch.
Oh, I already fixed that problem in feature-branch. This happened in the commit fixing the JS bindings genericContext() stuff. (read: removing, and replacing by a safer concept).