chromium/third_party/blink/web_tests/fast/loader/javascript-url-iframe-crash.html

<iframe src="javascript:''"></iframe>
<a><summary><pre><pre><pre><pre><pre><iframe src="javascript:''"></iframe>

<a>
<script>
if (window.testRunner)
    testRunner.dumpAsText();
</script>
This test passes if it doesn't crash.