insert-tab-to-html-element-crash.html

<!DOCTYPE html>
<head>
<script>
if (window.testRunner)
    testRunner.dumpAsText();

onload = function() {
    getSelection().collapse(document.body, 0);
    document.body.parentNode.removeChild(document.body);
    document.designMode = 'on';
    document.execCommand("InsertText", false, '\t');
    document.documentElement.textContent = 'PASS if Blink doesn\'t crash.';
}
</script>
</head>
<body>
</body>
</html>

chromium/third_party/blink/web_tests/editing/execCommand/insert-tab-to-html-element-crash.html