chromium/third_party/blink/web_tests/external/wpt/css/css-lists/list-marker-containing-control-char-crash.html

<!DOCTYPE html>
<html>
<head>
<meta charset="utf-8">
<style>
*::marker {
  content: '\643\D'
}
</style>
<script>
addEventListener("DOMContentLoaded", () => {
  getSelection().collapse(document.body.lastChild, document.body.lastChild.length);
}, {once: true});
</script>
</head>
<body>
<ol>
    <li contenteditable></li>
</ol>
</body>
</html>