chromium/third_party/blink/web_tests/editing/execCommand/outdent-collapse-table-crash-2.html

<!DOCTYPE html>
<html>
<head>
<style>
* {
    visibility: visible;
}

*:only-of-type {
    visibility: collapse;
}
</style>
<script>
if (window.testRunner)
    testRunner.dumpAsText();

onload = function() {
    document.designMode = 'on';
    var blockQuote = document.querySelector('blockquote');
    getSelection().collapse(blockQuote, 2);
    document.execCommand('Outdent');
    document.documentElement.textContent = 'PASS if Blink doesn\'t crash.';
};
</script>
</head>
<body>
<blockquote>
<table><tr><td>foo</td></tr></table>
<table><tr><td>bar</td></tr></table>
</blockquote>
</body>
</html>