Codebase Browser
chromium
Go to App

chromium/third_party/blink/web_tests/fast/dom/DOMImplementation/move-meta-to-createDocument-crash.html 

<html>
<meta id=meta content=no-referrer-when-downgrade name=referrer>
<script>
if (window.testRunner)
  testRunner.dumpAsText();
document.implementation.createDocument("", null).appendChild(meta);
</script>
PASS if no crash.