head-parsing-19517.html | Explore in Territory

<BODY onload="go()"><SCRIPT>
    function go() {
        if (window.testRunner)
            testRunner.dumpAsText();
        document.body.parentElement.removeChild(document.body);
        o = document.createElement("textArea");
        o.innerHTML='<b><menu><link></b><head></head>x';
        document.write("<p>Test for <a href='https://bugs.webkit.org/show_bug.cgi?id=19517'>bug 19517</a>: DOM modification of textArea causes Access Violation</p>");
        document.write("<p>PASS if no crash</p>");
    }
</SCRIPT></BODY>

chromium/third_party/blink/web_tests/fast/parser/head-parsing-19517.html