Long-press the text below and tap Share. The compromised renderer (see chromium-changes.patch) will begin a renderer-initiated navigation to the prerendered victim before replying to RequestSelector.
SELECT AND SHARE THIS LINE OF TEXT