1 files changed, 21 insertions, 0 deletions
diff --git a/testing/web-platform/tests/css/css-contain/content-visibility/slot-content-visibility-18-crash.html b/testing/web-platform/tests/css/css-contain/content-visibility/slot-content-visibility-18-crash.html
new file mode 100644
index 0000000000..0860c37e49
--- /dev/null
+++ b/testing/web-platform/tests/css/css-contain/content-visibility/slot-content-visibility-18-crash.html
@@ -0,0 +1,21 @@
+<!DOCTYPE html>
+<link rel=author href="mailto:jarhar@chromium.org">
+<link rel=help href="https://bugs.chromium.org/p/chromium/issues/detail?id=1267276">
+
+<table>foo</table>
+<details open=true>
+  <dialog open=true>
+    <table>
+      <tr></tr>
+    </table>
+  </dialog>
+</details>
+
+<script>
+  const dialog = document.querySelector('dialog');
+  dialog.close();
+  dialog.showModal();
+  const cell = document.querySelector('tr').insertCell();
+  document.querySelector('details').appendChild(cell);
+  document.body.attachShadow({mode: 'closed'});
+</script>