http://repo.or.cz/w/elinks/miciah.git?a=shortlog;h=refs/heads/miciah/heartbeat has a patch for this, using SIGVTALRM instead of SIGALRM (which is not how the ecmascript.max_exec_time is documented but should catch runaway scripts all the same). I haven't tested it.
pgpHSHmaskgxp.pgp
Description: PGP signature