chromium/third_party/blink/web_tests/fast/dom/script-remove-child-id-map.html

<!DOCTYPE html>

<script src="../../resources/js-test.js"></script>

<script>
description("Passes if it doesn't crash and the child is not in the id map");

var script = document.createElement("script");
script.type = "dont-execute";
script.textContent = "script.remove()";
child = document.createElement("div");
child.id = "child";
script.appendChild(child);

// The script won't execute here because the type is invalid, but it also won't
// get marked as being already run, so changing the children later will run it.
document.documentElement.appendChild(script);

// Per the spec setting the type has no effect
script.type = "";

// but changing the children *will* execute the script now that the type is
// is valid.
child.remove();

child = null;
gc();

shouldBeNull("document.getElementById('child')");
</script>