chromium/third_party/blink/web_tests/fast/parser/document-close-iframe-load-partial-entity.html

<script>
if (window.testRunner)
    testRunner.dumpAsText();
alert('This test passes if the text "&g" appears below.');
</script>
This test passes if it doesn't crash.
<iframe onload="document.open();document.write('&g');document.close();" >