chromium/third_party/blink/manual_tests/editing-disabled-node-replace-crash.html

<!DOCTYPE html>

<html>
<head>
    <title>Replacing text should not crash.</title>
</head>
<body>
    <p>Manual test for fix <a href="https://bugs.webkit.org/show_bug.cgi?id=75941">Bug 75941</a></p>
    <p>Right click the following input text, and replace the misspelled text [zz] to something.</p>
    <p>Renderer should not crash in that operation.</p>
    <input id="input" disabled value="zz">
</body>
</html>