dom/base/crashtests/1422883.html

   1 <style>
   2 :after{-webkit-mask:url(#);content:counter(a)}
   3 </style>
   4 <script>
   5 function go(){
   6   a.attachShadow({mode:"closed"})
   7 }
   8 </script>
   9 <body onload=go()>
  10 <h2 id="a">