chromium/third_party/blink/web_tests/editing/execCommand/indent-table-cell-crash.html

<!DOCTYPE html>
<head>
<style>
hr { display: table-cell; }
</style>
<script>
if (window.testRunner)
    testRunner.dumpAsText();

onload = function() {
    document.designMode = 'on';
    document.execCommand('SelectAll');
    document.execCommand('Indent');
    document.body.textContent = 'PASS if Blink doesn\'t crash.';
};
</script>
</head>
<body>
before<hr><hr>after
</body>
</html>