testing/web-platform/tests/svg/crashtests/chrome-bug-1474157.html


1
2
3
4
5
6
7
8
9
10

<!DOCTYPE html>
<svg>
  <foreignObject id="target">
    <div style="position: sticky; top: 0;"></div>
  </foreignObject>
</svg>
<script>
document.body.offsetTop;
document.getElementById('target').style.overflow = 'visible';
</script>