placeholder-input-dynamic-crash.html

<!doctype html>
<title>Dynamic placeholder attribute changes after addition shouldn't crash</title>
<link rel="help" href="https://bugzilla.mozilla.org/show_bug.cgi?id=1662483">
<input type="text">
<script>
  let input = document.querySelector("input");
  input.getBoundingClientRect();
  input.placeholder = "Foo";
  input.placeholder = "Bar";
</script>

chromium/third_party/blink/web_tests/external/wpt/css/css-pseudo/placeholder-input-dynamic-crash.html