Hi Dimitri,
Please take the patch, it should be committed to WebKit tree. Feel free to make changes, and I am happy to help.
Thanks
A patch for
http://crbug.com/17400
Event listeners on element can create cycler references between ref counted C++ objects and JS wrappers.
The issue is the same as XHR, and we handled there by using hidden references on JS side to track references.
This patch does the same thing for event listeners on Node and Document.
Event listeners on Window object may have similar cycler reference, and it can be handled using the same solution.