See the comment at http://lxr.mozilla.org/seamonkey/source/content/base/src/nsContentList.h#143 With JS access this is not a _huge_ problem, since we'll hold a ref to mRootContent while the list's JSObject lives (see bug 153519). But we should still fix this. Now that we can notify content lists that their root has gone away, we just need to hook up a mechanism to do said notification at the right time.

https://bugzilla.mozilla.org/show_bug.cgi?id=1472046 Move all DOM bugs that haven’t been updated in more than 3 years and has no one currently assigned to P5. If you have questions, please contact :mdaly.