Codebase Browser
chromium
Go to App

chromium/third_party/blink/web_tests/security/lazy-event-listener.html 

<!DOCTYPE html>
<html onmousedown="}); true?0x31337:(function() {">
Test passes if it doesn't crash.
<script>
if (window.testRunner)
    testRunner.dumpAsText();
document.documentElement.onmousedown;
</script>
</html>