chromium/third_party/blink/web_tests/external/wpt/html/rendering/the-details-element/two-summaries-removal-crash.html

<!DOCTYPE html>
<meta charset="utf-8">
<link rel="author" href="mailto:[email protected]">
<link rel="help" href="https://crbug.com/1216804">
<meta name="assert" content="The renderer should not crash.">

<details id="details" open>
  <summary></summary>
  <summary>
    <details></details>
  </summary>
</details>

<script>
details.appendChild(document.createElement("frame"));
details.innerText="";
</script>