selectall-and-inerthtml-in-textarea-editing-host.html

<html>
<head>
<script type="text/javascript">

function boom()
{
  document.execCommand("selectAll", false, null);
  document.execCommand("inserthtml", false, "<p>");
}

</script>
</head>

<body onload="boom();"><textarea contenteditable="true"></textarea></body>
</html>

chromium/third_party/blink/web_tests/external/wpt/editing/crashtests/selectall-and-inerthtml-in-textarea-editing-host.html