Codebase Browser
chromium
Go to App

chromium/third_party/blink/web_tests/external/wpt/css/CSS2/linebox/crashtests/dir-change-simplifed-crash.html 

<!DOCTYPE html>
<link rel="help" href="https://drafts.csswg.org/css2/#direction">
<link rel="author" title="Koji Ishii" href="mailto:[email protected]">
<style>
body, div { position: absolute; }
body { direction: rtl; white-space: pre-line; }
</style>
<body>&#x20;&#x20;&#xA;'123456789<div>&#x20;</div>
<script>
  // Force layout and await paint
  document.body.offsetLeft;
  requestAnimationFrame(() => requestAnimationFrame(() => {
    document.querySelector("div").dir = "ltr";
  }));
</script>
</body>