gecko-dev/dom/html/crashtests/877910.html

2 строки
92 B
HTML

<select><option id="foo"><script>document.querySelector("select").namedItem("foo")</script>