Codebase Browser
chromium
Go to App

chromium/third_party/blink/web_tests/editing/style/apply-style-crash.html 

<!DOCTYPE html>
<html>
<script>
if (window.testRunner) {
    testRunner.dumpAsText();
}

window.onload = function() {
    x.innerHTML += '';

    document.designMode = 'on';
    document.execCommand('selectall');
    document.execCommand('bold');

    document.body.offsetTop;
    document.body.innerHTML = "PASS. WebKit didn't crash.";
};
</script>
<div id="x"><iframe src="data:"></iframe>
<span><span><plaintext>