unclosed-content-attr-bracket-crash.html

<!DOCTYPE html>
<script src="../resources/testharness.js"></script>
<script src="../resources/testharnessreport.js"></script>
<script>
test(() => {
    document.documentElement.style = 'content: attr(test) / attr(';
}, 'This test passes if it does not crash.');
</script>

chromium/third_party/blink/web_tests/css-parser/unclosed-content-attr-bracket-crash.html