Codebase Browser
chromium
Go to App

chromium/third_party/blink/web_tests/editing/execCommand/crash-replacing-list-by-list.html 

<!DOCTYPE html>
<body>
PASS if Blink doesn't crash.
<div id="sample" contenteditable="true"><ol><li><br></li></ol></div>
</body>
<script>
if (window.testRunner)
    testRunner.dumpAsText();
var sample = document.getElementById('sample');
getSelection().selectAllChildren(sample);
document.execCommand('InsertHTML', false, '<ul>');
sample.outerHTML = '';
</script>