Codebase Browser
chromium
Go to App

chromium/third_party/blink/web_tests/external/wpt/html/semantics/embedded-content/the-embed-element/embed-named-attribute-detached-context-crash.html 

<!DOCTYPE html>
<body>
<iframe id="i"></iframe>
<script>
let e = i.contentDocument.createElement("embed");
i.contentDocument.body.appendChild(e);
i.remove();

// These should not crash.
e.tryToGetAnAttribute;
e.tryToSetAnAttribute = "foo";
</script>
</body>