new file mode 100644
--- /dev/null
+++ b/dom/base/crashtests/476526.html
@@ -0,0 +1,10 @@
+<!DOCTYPE HTML>
+<html>
+<body>
+<iframe src="data:text/xml,
+ <html xmlns='http://www.w3.org/1999/xhtml'
+ onDOMAttrModified='window.frameElement.parentNode.removeChild(window.frameElement)'>
+ </html>"
+ onload="event.target.contentDocument.documentElement.setAttribute('x', 'y');"></iframe>
+</body>
+</html>
--- a/dom/base/crashtests/crashtests.list
+++ b/dom/base/crashtests/crashtests.list
@@ -13,16 +13,17 @@ load 371124-1.html
load 371124-2.html
load 372554-1.html
load 375399-1.html
load 404869-1.xul
load 417852-1.html
load 462947.html
load 439206-1.html
load 473284.xul
+load 476526.html
load 499006-1.html
load 499006-2.html
load 502617.html
load 504224.html
load 603531.html
load 601247.html
load 609560-1.xhtml
load 612018-1.html