Note that the example html has its string var enclosed by single quote on one side and double quote on the other side (a simple syntax error that shouldn't run into exception in browser).

To reproduce the error:

1. Compile content-shell using Debug mode
2. Run "content-shell JSeval.html"
3. Content-shell crashes and shows the following error:

ASSERTION FAILED: !m_globalScope->shouldSanitizeScriptError(state.sourceURL, NotSharableCrossOrigin)
../../third_party/WebKit/Source/bindings/core/v8/WorkerOrWorkletScriptController.cpp(269) : bool blink::WorkerOrWorkletScriptController::evaluate(const blink::ScriptSourceCode &, WTF::RawPtr<ErrorEvent> *, blink::CachedMetadataHandler *, blink::V8CacheOptions)
...
Received signal 11 SEGV_MAPERR 0000fbadbeef
#0 0x0000007212be base::debug::StackTrace::StackTrace()
#1 0x000000720dff base::debug::(anonymous namespace)::StackDumpSignalHandler()
#2 0x7f71f4f42340 <unknown>
#3 0x000003f3eb11 blink::WorkerOrWorkletScriptController::evaluate()

 

Deleted: JSeval.html 554 bytes

JSeval.html 554 bytes View Download