chromium/third_party/blink/web_tests/fast/forms/form-submit-in-image-document.html

<!DOCTYPE html>
<body>
<script src="../../resources/js-test.js"></script>

<iframe src="resources/logo.gif"></iframe>

<script>
description('Test if Blink does not crash by form submission in a document with null encoding.');
jsTestIsAsync = true;

function finish() {
    testPassed('if not crashed');
    finishJSTest();
}

window.onload = function() {
    var doc = document.querySelector('iframe').contentDocument;
    var form = doc.createElement('form');
    form.action = 'javascript:parent.finish()';
    form.innerHTML = '<input type="hidden" name="hidden">';
    doc.body.appendChild(form);
    form.submit();
};
</script>
</body>