chromium/third_party/blink/web_tests/svg/as-image/svg-with-parse-error-crash.html

<!DOCTYPE html>
<script>
if (window.testRunner)
    testRunner.dumpAsText();
</script>
<style>
#image-shape {
    float: right;
    shape-outside: url("data:image/svg+xml,<svg xmlns='http://www.w3.org/2000/svg'>");
}
</style>
<div id="image-shape"></div>
PASS - SVG image with parse error does not crash.