chromium/third_party/blink/web_tests/fast/dom/script-element-without-frame-crash.html

<p>
This page tests for a crash in the HTML tokenizer when adding a &lt;script&gt;
element to a document without a frame.
</p>

<pre>PASS: You didn't crash.</pre>

<script>
if (window.testRunner)
    testRunner.dumpAsText();
    
var doc = document.implementation.createHTMLDocument("");
doc.write("<\script src=''>;<\/script>");
</script>