chromium/third_party/blink/web_tests/accessibility/display-table-cell-causes-crash.html

<html>
<head>
<script src="../resources/js-test.js"></script>
</head>
<body>

<p id="description">This test makes sure that an element with a display of table-cell doesn't cause a crash when accessibility code assumes it must be a TD or TH element.</p>

<div id="console"></div>

<table></table>

<script>
    if (window.testRunner)
        testRunner.dumpAsText();

    var table = document.querySelector('table');
    var span = document.createElement('span');
    table.appendChild(span);
    var div = document.createElement('div');
    div.style.display = 'table-cell';
    table.appendChild(div);
    var input = document.createElement('input');
    input.setAttribute('autofocus', 'autofocus');
    div.appendChild(input);
</script>


</body>
</html>