style-insertion-crash.html | Explore in Territory

<!doctype html>
<html>
<head>
<script src="../../../resources/js-test.js"></script>
<script>
jsTestIsAsync = true;

function runTest() {
    var host = document.getElementById('host');
    var sr = host.attachShadow({mode: 'open'});
    sr.innerHTML = '<style>@host { }</style><style></style>';
    var style = document.createElement('style');
    sr.insertBefore(style, sr.lastElementChild);

    testPassed("unless crash");
    finishJSTest();    
}
</script>
</head>
<body onload="runTest()">
  <div id="host"></div>
</body>
</html>

chromium/third_party/blink/web_tests/fast/dom/shadow/style-insertion-crash.html