chromium/third_party/blink/web_tests/fast/dom/HTMLScriptElement/script-element-moved-from-disposed-document-crash.html

<!DOCTYPE html>
<html>
<head>
<script src="../../../resources/js-test.js"></script>
</head>
<body id=bodyElement>
<iframe id=iframe></iframe>
<script>
if (window.testRunner)
    testRunner.dumpAsText();

var xhtml = document.implementation.createDocument("http://www.w3.org/1999/xhtml", "html");
var body = bodyElement;
iframe.contentDocument.documentElement.appendChild(body);
body.parentNode.removeChild(body);
gc();
xhtml.documentElement.appendChild(body);
testPassed('no crash');
</script>
</body>
</html>