Test that modifying the Location object inside an Object.observe callback does not crash

BUG=360891

Review URL: https://codereview.chromium.org/232503006

git-svn-id: svn://svn.chromium.org/blink/trunk@171300 bbb929c8-8fbe-4397-9dbb-9b2b20218538