chromium/third_party/blink/web_tests/fast/parser/badurl-base-preloader-crash.html

<!DOCTYPE html>
<base href="gopher:��&#279%�:0"></base>
<script src=":"></script>
<script>
if (window.testRunner) testRunner.dumpAsText();
</script>
<p>PASS: if scanning this document with preloader doesn't crash in debug builds</p>