chromium/third_party/blink/web_tests/editing/selection/keydown-without-selection-crash.html

<!DOCTYPE html>
<input id="t">
<script>
if (window.testRunner)
    testRunner.dumpAsText();

document.getElementById('t').focus();
document.designMode = 'on';
window.getSelection().removeAllRanges();
if (window.eventSender)
    eventSender.keyDown('\t');
document.body.innerHTML = 'This test passes if it does not crash';
</script>