chromium/third_party/blink/web_tests/fast/canvas/bug532148.html

<!doctype html>
<canvas id='c'></canvas>

<script>
const canvas = document.getElementById('c'),
ctx = c.getContext('2d', {alpha: false});

// The following would permanently damage the canvas (crbug.com/532148)
canvas.height = null;
ctx.fillRect( 0, 0, 128, null );

// Try to use canvas normally
canvas.width = 128;
canvas.height = 128;

ctx.fillStyle = 'green';
ctx.fillRect( 0, 0, 128, 128 );
ctx.fillStyle = 'blue';
ctx.fillRect( 0, 0, 64, 64 );
ctx.fillRect( 64, 64, 64, 64 );
</script>