Codebase Browser
chromium
Go to App

chromium/third_party/blink/web_tests/external/wpt/editing/crashtests/queryCommandValue-backcolor-after-replacing-html-element-with-new-one-in-designMode-from-load.html 

<html>
<BODY onload="
document.designMode='on';
document.replaceChild(document.createElement('HTML'), document.firstChild);
document.queryCommandValue('backcolor');
">
</body>
</html>