Codebase Browser
chromium
Go to App

chromium/third_party/blink/web_tests/external/wpt/css/css-pseudo/firefox-bug-1907238-crash.html 

<!DOCTYPE html>
<meta charset=cp1252>
<style>
::first-letter {}
</style>
<script>
document.addEventListener("DOMContentLoaded", () => {
  let a = document.createElement("pre")
  a.innerHTML = "<a dir='rtl'><i"
  let b = document.createElement("a")
  a.appendChild(b)
  document.documentElement.appendChild(a)
  b.insertAdjacentText("beforebegin", "�\nۭ")
})
</script>