diff --git a/content/base/crashtests/838489-1.html b/content/base/crashtests/838489-1.html
new file mode 100644
index 000000000000..ed10dff5a1f6
--- /dev/null
+++ b/content/base/crashtests/838489-1.html
@@ -0,0 +1,11 @@
+><bdi id=test>
+<xmp></xmp><font>><span><br>><keygen>><script>
+document.addEventListener("DOMContentLoaded", CFcrash, false);
+function editFuzz() {
+document.designMode = "on";
+try { document.execCommand("indent", false, true) } catch(e) {}
+}
+function CFcrash() {
+setTimeout("try { editFuzz(); } catch(e) {}", 0);
+try { test.setAttribute("dir", "&locale.dir;"); } catch(e) {}
+}</script>>
\ No newline at end of file
diff --git a/content/base/crashtests/crashtests.list b/content/base/crashtests/crashtests.list
index 0b5395a8fbae..fbbf5ab5a8d3 100644
--- a/content/base/crashtests/crashtests.list
+++ b/content/base/crashtests/crashtests.list
@@ -129,6 +129,7 @@ load 827190.html
 load 828054.html
 load 829428.html
 load 836890.html
+load 838489-1.html
 load 841205.html
 load 844404.html
 load 847127.html