chromium/third_party/blink/web_tests/fast/css/giant-stylesheet-crash.html

<head>
<script>
// GC unreferenced strings to avoid that this test times out.
if (window.GCController)
    GCController.collect();

if (window.testRunner)
    testRunner.dumpAsText();
</script>

<script>
var styleElement = document.createElement('style');
styleElement.setAttribute('type', 'text/css');

var str="z";
for (var i = 0; i < 16; i++) {
    str += str;
}
for (var i = 0; i < 1+(1<<16); i++){
    var txt = document.createTextNode(str);
    styleElement.appendChild(txt);
}

str = null;

// GC the large str strings to avoid timeouts for subsequent tests.
if (window.GCController)
    GCController.collect();

document.getElementsByTagName('head')[0].appendChild(styleElement);
</script>
</head>
<body>
This test verifies that creating a huge inline stylesheet doesn't crash.
</body>