Created attachment 240690 [details]
HTML file that causes Mobile Safari to crash.
Profiling in instruments shows thousands of allocations of 528 Bytes by:
I can send the trace if requested (it seems I'm only allowed one attachment here).
The XSS Auditor is removed in Bug 230499.