Bug 1966635 [wpt PR 52566] - Don't parse element dependent math functions in canvas context,

Automatic update from web-platform-tests
Don't parse element dependent math functions in canvas context

Fixed: 416454066
Change-Id: I0b864228593318e98a81143b5eed11b328795624
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/6533703
Reviewed-by: Rune Lillesveen <futharkchromium.org>
Commit-Queue: Daniil Sakhapov <sakhapovchromium.org>
Cr-Commit-Position: refs/heads/main{#1460616}

--

wpt-commits: 3dbf1963195e65f2f04b26013ad07f9202b93cc8
wpt-pr: 52566

Differential Revision: https://phabricator.services.mozilla.com/D250626

UltraBlame original commit: a847e6c6ae4bc5b60d81cc3a204452876e7de8bf

Author: marco-c

testing/web-platform/tests/html/canvas/canvas-sibling-index-crash.html

@@ -0,0 +1,103 @@
+<
+!
+DOCTYPE
+html
+>
+<
+link
+rel
+=
+"
+help
+"
+href
+=
+"
+http
+:
+/
+/
+crbug
+.
+com
+/
+416454066
+"
+>
+<
+canvas
+id
+=
+"
+canvas
+"
+>
+<
+/
+canvas
+>
+<
+script
+>
+const
+canvas
+=
+document
+.
+getElementById
+(
+"
+canvas
+"
+)
+;
+const
+ctx
+=
+canvas
+.
+getContext
+(
+"
+2d
+"
+)
+;
+ctx
+.
+fillStyle
+=
+"
+lch
+(
+from
+blue
+calc
+(
+l
++
+sibling
+-
+index
+(
+)
+)
+c
+h
+)
+"
+;
+ctx
+.
+fillRect
+(
+10
+10
+100
+100
+)
+;
+<
+/
+script
+>