remove-reattached-plugin-crash.html

<!DOCTYPE html>
<object id="plugin" type="application/x-webkit-test-webplugin"></object>
<script src="../resources/testharness.js"></script>
<script src="../resources/testharnessreport.js"></script>
<script>
  test(()=> {
    document.body.offsetTop;
    plugin.style.display = "block";
    document.body.offsetTop;
    plugin.parentNode.removeChild(plugin);
  }, "no crash or DCHECK failure");
</script>

chromium/third_party/blink/web_tests/plugins/remove-reattached-plugin-crash.html