Codebase Browser
chromium
Go to App

chromium/third_party/blink/web_tests/editing/inserting/insert-html-to-textarea-crash.html 

<!DOCTYPE html>
<textarea></textarea>
<script>
if (window.testRunner)
    testRunner.dumpAsText();
document.querySelector('textarea').setSelectionRange(0, 0);
document.execCommand("InsertHTML", false, "<b></b>");
document.body.textContent = 'PASS if Blink doesn\'t crash.';
</script>