javascript-url-style-crash.html | Explore in Territory

<!DOCTYPE html>
<body>
<script>
function callback() {
    style0.innerHTML = '';
    iframe0.removeChild(style0);
}

style0=document.createElement('style');
style0.innerHTML = 'span { color: blue; }';

iframe0=document.createElement('iframe');
iframe0.appendChild(style0);
iframe0.src='javascript:window.top.callback();';
document.body.appendChild(iframe0);

if (window.testRunner)
    testRunner.dumpAsText();
</script>
<p>PASS unless crash</p>
</body>

chromium/third_party/blink/web_tests/fast/frames/javascript-url-style-crash.html