split-anonymous-crash.html | Explore in Territory

<!DOCTYPE html>
<style>
    #fl:first-letter { color:red; }
</style>
<script>
    if (window.testRunner)
        testRunner.dumpAsText();
    window.onload = function() {
        document.body.offsetTop;
        elm2.style.display = 'table-row';
    }
</script>
<p>Setting style on a cell whose row hasn't been laid out yet should not crash.</p>
<div id="fl" style="display:table-row-group; padding-top:1vw;">
    <div>elm1</div>
    <div id="elm2" style="display:none;">elm2</div>
    <div style="display:table-row-group;">nested row group</div>
</div>

chromium/third_party/blink/web_tests/fast/table/split-anonymous-crash.html