replacement-fragment-remove-unrendered-node-crash.html

<!DOCTYPE html>
<html>
Test passes if it does not crash.
<input id="test" contenteditable="true">
<script src="../editing.js"></script>
<script>
if (window.testRunner)
    testRunner.dumpAsText();

var e = document.getElementById("test");
var s = window.getSelection();

s.collapse(e, e.childNodes.length);
insertHTMLCommand("<noscript>baz");
</script>
</html>

chromium/third_party/blink/web_tests/editing/pasteboard/replacement-fragment-remove-unrendered-node-crash.html