selectAll-including-marquee-crash.html

<!DOCTYPE html>
<style>
    marquee {
        padding-bottom: 1px;
    }
</style>
<body>
    <marquee>
        aa
        <table></table>
    </marquee>
    <script>
        if (window.testRunner)
            testRunner.dumpAsText();
        document.designMode = "on";
        document.execCommand("SelectAll");
        document.execCommand("InsertHTML", false);
        document.documentElement.innerHTML = '<title>a</title>This test passes if it does not crash.';
    </script>
</body>

chromium/third_party/blink/web_tests/editing/execCommand/selectAll-including-marquee-crash.html