chromium/third_party/blink/web_tests/fast/html/resources/marquee-crash.svg

<?xml version="1.0"?>
<svg id="element0" xmlns="http://www.w3.org/2000/svg" 
 xmlns:svg="http://www.w3.org/2000/svg"
 onload="start()">
  <script type="text/javascript"><![CDATA[
  function start() {
	document.getElementById("element1").appendChild(window.top.mq2);
  }
  ]]>
  </script>
  <foreignObject id="element1" width="500" height="500">
  </foreignObject>
</svg>