third_party/WebKit/LayoutTests/fast/dom/resources/javascript-url-crash-function-iframe.html

<script>
function test()
{
    (function ()
    {
        (function ()
        {
            (function ()
            {
                frameElement.src = "javascript:'<pre>PASS: You didn\\'t crash.</pre>'";
            })()
        })()
    })()
}

setTimeout(function ()
{
    // Capture window.window into a variable, since this property returns null as soon as the
    // context is navigated.
    var w = window;
    test();
    if (w.testRunner)
        w.testRunner.notifyDone();
}, 0);
</script>