chromium/third_party/blink/web_tests/fast/dom/constructor-in-removed-frame.html

<!DOCTYPE html>
<p>FAIL</p>
<iframe src="data:text/html,FAIL"></iframe>
<script>

window.onload = function() {
    if (window.testRunner) {
        testRunner.waitUntilDone();
        testRunner.dumpAsText();

        var iframeElement = document.querySelector('iframe');
        iframeElement.onload = function() {
            var frame = window.frames[0];
            iframeElement.parentNode.removeChild(iframeElement);

            // The V8 bindings does not keep the frame constructor alive but at least it should not crash!
            frame.Window;

            document.body.textContent = 'PASS';
            testRunner.notifyDone();
        };
        iframeElement.srcdoc = '<html><body>PASS</body></html>';
    }
};

</script>
</body>
</html>