area-crash.html | Explore in Territory

<!--
@BLINK-ALLOW:htmlTag='area'
@WAIT-FOR:done

This is a regression test for a bug that crashes when determining if an area is
a descendant of an anchor.

Note: an <area> that has no href exposes its text inside a generic container.
-->
<html>
<script>
  window.onload = () => {
    document.getElementById('area').textContent = "foo";
    document.body.appendChild(document.createTextNode("done"));
  };
</script>

<body>
  <area id='area'/>
</body>

chromium/content/test/data/accessibility/html/area-crash.html