When a new tab gets an invalid URL in the form "javascript:function()",
galeon segfaults (this happens frequently when I hit the middle mouse
button  to open new tab on links with javascript code). On restarting
galeon, if I try to recover the previous session, it hits the same problem
and segfaults again.

If you drop in a session_crashed.xml like the one below, you'll see the
problem upon restoring the session:
<?xml version="2.0"?>
<session>
  <window x="0" y="0" width="1022" height="672">
    <embed url="javascript:function('param')" title="Untitled"/>
    <embed url="http://bugzilla.gnome.org/enter_bug.cgi?product=galeon"
title="Login"/>
  </window>
</session>