chromium/third_party/blink/web_tests/external/wpt/html/semantics/scripting-1/the-template-element/template-table-crash.html

<!DOCTYPE html>
<meta charset="utf-8">
<link rel="author" href="mailto:[email protected]">
<link rel="help" href="https://crbug.com/1212619">
<meta name="assert" content="The renderer should not crash.">

<template id=tmpl></template>
<table id=tbl>
  <script>
    tmpl.appendChild(tbl);
  </script>
  Crash
</table>