crash-col-in-anonymous-table.html | Explore in Territory

<!DOCTYPE html>
<html>
<head>
<script>
    if (window.testRunner)
        testRunner.dumpAsText();

    function crash() {
        var th = document.createElement("th");
        var col = document.createElement("col");

        document.body.appendChild(th);
        document.body.appendChild(col);
    }
</script>
</head>
<body onload="crash();">
<div>Bug <a href="https://bugs.webkit.org/show_bug.cgi?id=330651">330651</a>: infinite recursion when creating anonymous table structure</div>
<div>This test passes if it does not CRASH or HANG.</div>
</body>
</html>

chromium/third_party/blink/web_tests/fast/table/crash-col-in-anonymous-table.html