chromium/third_party/blink/web_tests/fast/dom/script-innerHTML.html

<body>
<p>Should say PASS:</p>
<div id="test"></div>
<script>
if (window.testRunner)
    testRunner.dumpAsText();

var e= document.createElement('script');
e.innerHTML= "document.getElementById('test').innerHTML='<p>PASS';";
document.body.appendChild(e);
</script>