It's no longer available via the Mozilla bug report, but a copy is included in the Caja sources:

http://code.google.com/p/google-caja/source/browse/trunk/thi...