Codebase Browser
chromium
Go to App

chromium/third_party/blink/web_tests/editing/style/apply-style-crash2.html 

<!DOCTYPE html>
<html>
<body>
This test passes if it does not crash.
<script>
if (window.testRunner)
  testRunner.dumpAsText();

el1 = document.createElement('li');
document.body.appendChild(el1);
el2 = document.createElement('thead');
el1.appendChild(el2);
el2.parentNode.insertBefore(document.createElement('video'), el2);
el2.parentNode.insertBefore(document.createElement('input'), el2);
document.designMode = 'on';
window.getSelection().setBaseAndExtent(el1, 2, el2, 0);
document.designMode = 'off';
window.getSelection().modify('extend', 'backward', 'character');
el1.innerHTML = "PASS";
document.designMode = 'on';
document.execCommand('FontSizeDelta', false, '-1px');
document.designMode = 'off';
</script>
</body>
</html>