delete-hidden-crash.html | Explore in Territory

<!DOCTYPE html>
<html>
<head>
<script>
if (window.testRunner)
    testRunner.dumpAsText();

onload = function() {
    document.execCommand('SelectAll')
    span = document.getElementsByTagName('span')[0];
    span.contentEditable = 'true';
    span.textContent = 'bar';
    document.execCommand('InsertText', false, '1');
    document.body.textContent = 'PASS if Blink doesn\'t crash.';
};
</script>
<style>
* { visibility:visible; }
.inline { display:inline; }
*:only-child { visibility:hidden; }
</style>
</head>
<body>
<table>
<tr><td><span><table></table><span></span></span></td></tr>
<tr><td><td class="inline">foo</td></tr>
</table>
</body>
</html>

chromium/third_party/blink/web_tests/editing/execCommand/delete-hidden-crash.html