Codebase Browser
chromium
Go to App

chromium/third_party/blink/web_tests/svg/custom/empty-className-baseVal-crash.html 

<!DOCTYPE html>
<script>
  if (window.testRunner)
    testRunner.dumpAsText();
  document.createElementNS("http://www.w3.org/2000/svg", "svg").className.baseVal = "";
</script>
<body>
  PASS if no crash.
</body>