font-size-delta-after-anchor-crash.html

<!doctype html>
<script src="../../resources/testharness.js"></script>
<script src="../../resources/testharnessreport.js"></script>
<div contenteditable>
x<input><select style="display:block"><option id="anchor"></option></select>
</div>
<div id="log"></div>
<script>
test(() => {
    // Since parser reject child nodes in INPUT, we make child node in INPUT here
    // to make |VisibleSelection::m_extent| have INPUT, AfterAnchor.
    var input = document.querySelector('input');
    input.appendChild(document.createElement('i'));

    var selection = window.getSelection();
    selection.collapse(document.querySelector('#anchor'), 0);
    selection.extend(input, 1);
    document.execCommand('FontSizeDelta', false, '1');
});
</script>

chromium/third_party/blink/web_tests/editing/execCommand/font-size-delta-after-anchor-crash.html