chromium/third_party/blink/web_tests/dom/mutation-event-tests/editing/inserting/delete-insignificant-text-crash.html

<!DOCTYPE html>
<html>
<body>
<p>This tests deleting a node in DOMCharacterDataModified doesn't result in a crash.</p>
<div id="test" contenteditable></div>
<script>

if (window.testRunner)
    testRunner.dumpAsText();

var test = document.getElementById('test');
test.appendChild(document.createTextNode('a  '));
test.appendChild(document.createTextNode('  '));
test.appendChild(document.createTextNode('b'));
test.appendChild(document.createTextNode('  '));
getSelection().collapse(test.firstChild.nextSibling, 0);
document.body.addEventListener('DOMCharacterDataModified', function () {
    test.removeChild(test.firstChild.nextSibling);
    if (window.GCController)
        GCController.collect();
}, false);
document.execCommand("InsertText", false, "c");

test.textContent = '';
document.writeln('PASS');

</script>
</body>
</html>