Codebase Browser
chromium
Go to App

chromium/third_party/blink/web_tests/shadow-dom/crashes/slots-nested-in-document-tree-crash.html 

<!DOCTYPE html>
<script src='../../resources/testharness.js'></script>
<script src='../../resources/testharnessreport.js'></script>
<slot id='s1'>hello<slot id='s2'><div></div></slot></slot>
<script>
test(() => {
}, "No crash");
</script>