Codebase Browser
chromium
Go to App

chromium/third_party/blink/web_tests/external/wpt/css/css-break/chrome-bug-1288769-000-crash.html 

<!DOCTYPE html>
<div id="container">
  <div id="child" style="columns:2;">
    <div style="display:flex;"></div>
    <div style="display:grid;"></div>
    <div style="display:table;"></div>
  </div>
</div>
<script>
  document.body.offsetTop;
  container.style.columns = "2";
  container.style.display = "inline-table";
  child.style.display = "table-footer-group";
</script>