1 files changed, 13 insertions, 0 deletions
diff --git a/parser/htmlparser/tests/crashtests/1747514.html b/parser/htmlparser/tests/crashtests/1747514.html
new file mode 100644
index 0000000000..e8a93b9280
--- /dev/null
+++ b/parser/htmlparser/tests/crashtests/1747514.html
@@ -0,0 +1,13 @@
+<!DOCTYPE html>
+<html>
+  <head>
+  <script>
+    // Generate an SVG data URI whose URI string will consume 20 MB in expat
+    // (which uses two-byte chars).
+    let img = document.createElement('img');
+    let rect = "<rect />";
+    let src = "data:image/svg+xml;utf8,<svg>" + rect.repeat(20 * 1000 * 1000 / rect.length / 2) + "</svg>";
+    img.src = src;
+    document.body.appendChild(img);
+  </script>
+