We noticed that if your first access to an Attr node is after its Element is destroyed, you crash due to a null-dereference. This needs to be fixed.
Created attachment 40141 [details] patch
Comment on attachment 40141 [details] patch r=me
http://trac.webkit.org/changeset/48769
Mass moving XML DOM bugs to the "DOM" Component.