Codebase Browser
chromium
Go to App

chromium/third_party/blink/web_tests/editing/execCommand/insert-list-into-list-crash.html 

<!DOCTYPE html>
<script src="../../resources/testharness.js"></script>
<script src="../../resources/testharnessreport.js"></script>
<div>
<ul>
<li id="sample" contenteditable>foo</li>
</ul>
</div>
<div id="log"></div>
<script>
test(function() {
    var sample = document.getElementById('sample');
    window.getSelection().collapse(sample.firstChild, 0);
    document.execCommand('insertHTML', false, '<ul><li>bar</li></ul>');
});
</script>