http://venturebeat.com/2015/09/18/these-16-characters-crash-google-chrome/ (http://venturebeat.com/2015/09/18/these-16-characters-crash-google-chrome/)
Actually you don't actually need 16 characters, you can just attach "a/%%30%30" anywhere as part of the uri; doesn't even have to be HTTP.
It worked alright.