LayoutTests/svg/text/svg-rtl-text-crash.html - WebKit - Git at Google

 <html>
   <script>
   if (window.testRunner)
       testRunner.dumpAsText();
   </script>
   <style>
     svg {
   	direction: rtl;
     }
     :before {
       content: "]";
     }
   </style>
   <svg>
     <text>*</text>
   </svg>
   PASS
 </html>
	<html>
	<script>
	if (window.testRunner)
	testRunner.dumpAsText();
	</script>
	<style>
	svg {
	direction: rtl;
	}
	:before {
	content: "]";
	}
	</style>
	<svg>
	<text>*</text>
	</svg>
	PASS
	</html>