diff --git a/mozilla/content/xbl/crashtests/418133-1.xhtml b/mozilla/content/xbl/crashtests/418133-1.xhtml
new file mode 100644
index 00000000000..ea821b76eda
--- /dev/null
+++ b/mozilla/content/xbl/crashtests/418133-1.xhtml
@@ -0,0 +1,22 @@
+<html xmlns="http://www.w3.org/1999/xhtml"
+      xmlns:xul="http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul">
+<head>
+<script type="text/javascript">
+
+function boom()
+{
+  for(var p in document.getElementById("prefs")) {
+  }
+  
+  for(var p in window) {
+  }
+}
+
+</script>
+</head>
+<body onload="boom();">
+
+<xul:preferences id="prefs" />
+
+</body>
+</html>
diff --git a/mozilla/content/xbl/crashtests/crashtests.list b/mozilla/content/xbl/crashtests/crashtests.list
index 49ec9252786..e6c37b140ee 100644
--- a/mozilla/content/xbl/crashtests/crashtests.list
+++ b/mozilla/content/xbl/crashtests/crashtests.list
@@ -7,3 +7,4 @@ load 342954-2.xhtml
 load 406900-1.xul
 load 406904-1.xhtml
 load 406904-2.xhtml
+load 418133-1.xhtml
