Codebase Browser
chromium
Go to App

chromium/third_party/blink/web_tests/editing/execCommand/toggle-list-uneditable-crash.html 

<!DOCTYPE html>
<script src="../../resources/testharness.js"></script>
<script src="../../resources/testharnessreport.js"></script>
<ol>
<li contenteditable>foo</li>
</ol>
<div id="log"></div>
<script>
test(function() {
    getSelection().collapse(document.querySelector('li'), 0);
    document.execCommand('insertunorderedlist');
}, 'toggle-list-in-uneditable');
</script>