chromium/third_party/blink/web_tests/fast/css/content-image-set-disallowed-url-crash.html

<script src="../../resources/testharness.js"></script>
<script src="../../resources/testharnessreport.js"></script>

<style>
#target {
  content: image-set(url("chrome://disallowed-url/") 1x);
}

#target-prefixed {
  content: -webkit-image-set(url("chrome://disallowed-url/") 1x);
}
</style>

<img id="target">
<img id="target-prefixed">

<script>
test(() => {
  console.log(getComputedStyle(target).content);
}, 'This test passes if it does not crash.');
</script>