third_party/WebKit/LayoutTests/http/tests/history/replaceState-then-fragment.html

<script>
if (window.testRunner) {
    testRunner.dumpAsText();
    testRunner.waitUntilDone();
}

window.onload = function() {
    setTimeout(function() {
        window.addEventListener('hashchange', function() {
            document.body.appendChild(document.createTextNode(history.state == "FAIL" ? "FAIL" : "PASS"));
            if (window.testRunner)
                testRunner.notifyDone();
        });

        history.replaceState("FAIL", null);
        location.href = "#test";
    }, 0);
}
</script>