chromium/third_party/blink/web_tests/editing/spelling/crash-modifying-contenteditable.html

<!DOCTYPE html>
<script src="../../resources/testharness.js"></script>
<script src="../../resources/testharnessreport.js"></script>
<script>
test(function() {
  var doc = document.implementation.createDocument("", null);
  var div = document.createElement("div");
  doc.appendChild(div);
  div.setAttribute("contenteditable", "");
}, "Check change in `contenteditable` attribute.`");
</script>
<p>The test passes if it doesn't crash (<a href="crbug.com/687984">bug #687984</a>).</p>