Codebase Browser
chromium
Go to App

chromium/third_party/blink/web_tests/external/wpt/accessibility/crashtests/append-image-using-illegal-map.html 

<!DOCTYPE html>
<map name="map1"><button><li>xyz</li></button></map>
<script>
 const image = document.createElement('img');
 image.setAttribute('src', 'exists.gif');
 image.setAttribute('usemap', '#map1');
 document.documentElement.appendChild(image);
</script>