third_party/WebKit/LayoutTests/fast/dom/insertAdjacentHTML-DocumentFragment-crash.html

   1 This test passes if it doesn't crash (or ASSERT).
   2 <script>
   3 if (window.testRunner)
   4     testRunner.dumpAsText();
   5
   6 var f = document.createDocumentFragment();
   7 var s = document.createElement('div');
   8 f.appendChild(s);
   9 s.insertAdjacentHTML('afterend', "aaa");
  10 </script>