third_party/WebKit/LayoutTests/svg/masking/mask-valid-reference-wrong-element-type-crash.html - chromium/src - Git at Google

 <!DOCTYPE html>
 <svg mask="url(#f)">
   <filter id="f"/>
 </svg>
 <p>PASS if no crash in debug</p>
 <script>
 if (window.testRunner)
   testRunner.dumpAsText();
 </script>
	<!DOCTYPE html>
	<svg mask="url(#f)">
	<filter id="f"/>
	</svg>
	<p>PASS if no crash in debug</p>
	<script>
	if (window.testRunner)
	testRunner.dumpAsText();
	</script>