chromium/src/third_party/blink/web_tests/fast/events/caller-access-from-event-listener.html

<p>This test verifies that WebKit doesn't crash when accessing the 'caller' property
from inside an event listener.</p>
<hr>
<pre>PASS: WebKit didn't crash.</pre>
<script src="../../resources/js-test.js"></script>
<script>
function crash() {
    eval('crash.caller');
}

window.onload = crash;
</script>