Codebase Browser
chromium
Go to App

chromium/third_party/blink/web_tests/external/wpt/css/css-break/chrome-bug-1287342-crash.html 

<!DOCTYPE html>
<link rel="author" title="Morten Stenshorne" href="mailto:[email protected]">
<link rel="help" href="https://bugs.chromium.org/p/chromium/issues/detail?id=1287342">
<div>
  <div id="a" style="columns:2; display:table;"></div>
  <div id="b" style="columns:2; display:inline-table;"></div>
</div>
<script>
  document.body.offsetTop;
  a.style.display = "table-row-group";
  b.appendChild(a);
</script>