Comment 2 for bug 835455

The SVG specification says that x= and y= (and dx= and dy=) for <text> may be lists of numbers instead of just numbers. The scourLength function doesn't appropriately react to having more than one number delimited by anything in its input string.

There are also some more length attributes in <text> that your patch doesn't cover, like dx=, dy= and textLength=, as well as more elements using the same attributes as <text>, such as <tspan> and <altGlyph>.