chromium/third_party/blink/web_tests/editing/execCommand/italic-crash-by-iframe-load.html

<!DOCTYPE html>
<head>
<script src="../../resources/testharness.js"></script>
<script src="../../resources/testharnessreport.js"></script>
<body>
<script>
var t = async_test('Load event handler for IFRAME should not run during execCommand(), and should not mutate the DOM tree.');
</script>
<em id=tCF7><iframe onload="
    console.log('LOAD event on IFRAME');
    document.designMode = 'on';
    document.execCommand('selectall');
    document.execCommand('italic');
    document.body.innerHTML = '';
    t.done();
">x