Codebase Browser
chromium
Go to App

chromium/third_party/blink/web_tests/external/wpt/shadow-dom/imperative-slot-api-crash.html 

<!DOCTYPE html>
<link rel="author" href="mailto:[email protected]">
<link rel="help" href="https://html.spec.whatwg.org/multipage/scripting.html#dom-slot-assign">
<link rel="help" href="https://crbug.com/1201402">

<div id="host">
  <div id="child1"></div>
</div>
This test passes if it does not crash.
<script>
  const host = document.querySelector("#host");
  const child1 = document.querySelector("#child1");
  const shadow_root = host.attachShadow({ mode: "open", slotAssignment: "manual" });
  var slot1 = document.createElement("slot");
  slot1.id = "first_slot";
  shadow_root.appendChild(slot1);
  slot1.assign(child1);
  slot1.remove();
  slot1 = document.createElement("slot");
  slot1.id = "second_slot";
  shadow_root.appendChild(slot1);
  slot1.assign(child1); // Shouldn't crash here
</script>