chromium/third_party/blink/web_tests/fast/dom/remove-named-attribute-crash.html

<p>Test for <a href="http://bugs.webkit.org/show_bug.cgi?id=17876">Bug 17876: REGRESSION (r31060): Attempting to visit Ofcom page causes crash</a>.</p>
<p>Loading this page should not cause a crash.</p>

<button disabled>PASS</button>
<script>
    document.getElementsByTagName('button')[0].disabled = false;

    if (window.testRunner)
        testRunner.dumpAsText();
</script>