child-insertion-notify-crash.html | Explore in Territory

<!DOCTYPE html>
<html>
<script src="../../resources/js-test.js"></script>
<script>
function crash()
{
    document.getElementById("test").innerHTML = "PASS. WebKit didn't crash.";
    gc();    
}
</script>
<div dir="auto" id="test">A<iframe onload="crash()"></iframe></div>
</html>

chromium/third_party/blink/web_tests/fast/dom/child-insertion-notify-crash.html