Codebase Browser
chromium
Go to App

chromium/third_party/blink/web_tests/external/wpt/css/css-conditional/container-queries/crashtests/columns-in-table-002-crash.html 

<!doctype html>
<title>CSS Container Queries Test: container with multicol table-header-group crashes Chrome</title>
<link rel="help" href="https://drafts.csswg.org/css-conditional-5/#size-container">
<link rel="help" href="https://crbug.com/1307656">
<p>Pass if test does not crash.</p>
<div id="container" style="container-type:inline-size">
  <span style="display:table-header-group;columns:1"></span>
  <span style="display:table-header-group;"></span>
</div>
<script>
  // This originally caused a crash.
  document.body.offsetTop;
  // Additionally make sure we don't crash when the container is re-attached.
  container.style.display = "inline-block";
</script>