third_party/blink/web_tests/intersection-observer/target-in-detached-document.html

<!DOCTYPE html>
<pre id="root" style="white-space:pre-wrap">
This is a testharness.js-based test.
[PASS] if no crash.
Harness: the test ran to completion.
</pre>

<script>
if (self.testRunner) {
  testRunner.dumpAsText();
}
let doc = document.implementation.createHTMLDocument();
let target = document.createElement('img');
doc.body.appendChild(target);
let root = document.getElementById('root');
let observer = new IntersectionObserver(entries => {}, {
  root:root, delay:100, trackVisibility:true
});
observer.observe(target);
</script>