In the attached test case, the first script writes a <script> tag, followed by one JavaScript statement, but doesn't write a </script> tag. Therefore everything after the first script's closing tag up until the second </script> tag should be interpreted as part of the script written by the first script. WebKit loses the entire second script (and consequently also fails an assertion in debug builds). Firefox behaves correctly. Note that if the first script write a complete script, i.e. writes a </script> tag, then it's interpreted correctly.
Created attachment 8982 [details] Test case (will assert)
This bug is the "first half" of bug 9317. *** This bug has been marked as a duplicate of 9317 ***