inline-contain-layout-crash.html | Explore in Territory

<style>
span { contain: size layout; }
</style>
<script>
function leak() {
  if (window.testRunner)
    testRunner.dumpAsText();
  document.execCommand("selectAll");
  opt.text = "";
}
</script>
<body onload=leak()>
<span>
<select>
<option id="opt">aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa</option>
</select>
</span>

chromium/third_party/blink/web_tests/fast/css/containment/inline-contain-layout-crash.html