Codebase Browser
chromium
Go to App

chromium/third_party/blink/web_tests/external/wpt/mathml/crashtests/mozilla/393760-1.xhtml 

<html xmlns="http://www.w3.org/1999/xhtml" xmlns:math="http://www.w3.org/1998/Math/MathML">
<head>
<script>
function boom()
{
  document.getElementById("mfenced").setAttribute("mathbackground", "yellow");
}
</script>
</head>

<body onload="boom();">

<math:mfenced id="mfenced" />

</body>
</html>