Codebase Browser
chromium
Go to App

chromium/third_party/blink/web_tests/svg/text/unpaired-surrogate-crash.html 

<!DOCTYPE html>
<svg>
  <text y="20"></text>
</svg>
<script>
if (window.testRunner)
    testRunner.dumpAsText();
document.querySelector('text').textContent = 'PASS\ud9e8';
</script>