nonconformant-content-crash-1.html | Explore in Territory

<!doctype html>
<svg>
  <text><tspan>PASS</tspan><tspan><a><ellipse/></a></tspan></text>
</svg>
<script>
if (window.testRunner) {
    testRunner.dumpAsText();
    testRunner.waitUntilDone();
}
window.onload = function() {
  var e = document.querySelector('ellipse');
  e.parentNode.insertBefore(document.createElement('span'), e);
}

window.onload = function() {
    setTimeout(function() {
        if (window.testRunner)
            testRunner.notifyDone();
    }, 0);
};
</script>

chromium/third_party/blink/web_tests/svg/text/nonconformant-content-crash-1.html