http://software.hixie.ch/utilities/js/live-dom-viewer/?%3C!DOCTYPE%20html%3E%0A%3Cbody%3E%0A%20%3Cscript%3E%0Adocument.getElementsByTagName(%22head%22).innerHTML%20%3D%20'%3Cmeta%20http-equiv%3D%22refresh%22%20content%3D%221;%20url%3D/%22%3E'%0A%3C/script%3E%0AText Noticed the crash in the Chrome Dev channel. Have not investigated.
Didn't crash Safari with r69589 for me.
I don't see the crash in a TOT Mac port build either. Could be a Chrome-specific issue. I can still repro in the Chrome Dev channel, but I don't have a TOT Chrome build to try.
I am unable to reproduce the crash in Safari 15.6 on macOS 12.5 from test case mentioned in Comment 0. Hence, I am marking this as "RESOLVED WORKSFORME". Please reopen, if someone is able to reproduce the crash. Thanks!