use-style-recalc-script-execute-crash.html

<!DOCTYPE html>
<html>
Test passes if it does not crash and "script" inside "rect" executes.
<script>
if (window.testRunner)
    testRunner.dumpAsText();
</script>
<svg>
<g>
<use xlink:href="#test"/>
<rect id="test">
<script>
document.body.innerHTML = "PASS";
</script>
</rect>
</g>
</svg>
</html>

chromium/third_party/blink/web_tests/svg/dom/use-style-recalc-script-execute-crash.html