chromium/third_party/blink/web_tests/fast/forms/select/remove-element-from-within-focus-handler-crash.html

<select id="bomb" onfocus="this.parentNode.removeChild(this)">
    <option>Clicking on this select element should not crash</option>
</select>
<h2>Layout test for <a href='https://bugs.webkit.org/show_bug.cgi?id=23858'>bug 23858</a></h2>
<p>If this page is displayed without crashing then the test has passed.</p>
<script>
    if (window.testRunner)
        testRunner.dumpAsText();

    var select = document.getElementById('bomb');

    var rect = select.getBoundingClientRect();
    if (window.eventSender) {
        eventSender.mouseMoveTo(rect.left + 1, rect.top + 1);
        eventSender.mouseDown(0);
    }
</script>