chromium/third_party/blink/web_tests/fast/files/domurl-script-execution-context-crash.html

<html>
<script>
function crash()
{
    try {
        e.apply(w, ['URL']);
    } catch (ex) { }
    document.body.innerHTML = "PASS: null security context for URL did not crash";
    if (window.testRunner)
        testRunner.notifyDone();
}

function load()
{
    w.close();
    setTimeout(crash, 30);
}

if (window.testRunner) {
    testRunner.dumpAsText();
    testRunner.setPopupBlockingEnabled(false);
    testRunner.waitUntilDone();
}

e = (w = open()).eval;
</script>
<body onload="load()">
</body>
</html>