set-type-to-null-crash.html | Explore in Territory

<body onload="crash.type=null">
<object type="" id="crash"></object>

<script>
if (window.testRunner)
    testRunner.dumpAsText();
</script>
PASS - The test didn't crash.

chromium/third_party/blink/web_tests/fast/dom/HTMLObjectElement/set-type-to-null-crash.html