chromium/third_party/blink/web_tests/fast/dom/HTMLImageElement/image-srcset-invalid-url-no-crash.html

<!DOCTYPE html>
<script src="../../../resources/js-test.js"></script>
<script>
    description("Invalid img.srcset URL should not crash");
    window.jsTestIsAsync = true;
    if (window.testRunner) {
        testRunner.dumpAsText();
        testRunner.waitUntilDone();
    }
    function done() {
        testPassed("no crash.");
        finishJSTest();
    }
</script>
<img src="1x.png" srcset="//&%dE,; 1.2x" onerror="done()">