chromium/third_party/blink/web_tests/fast/forms/form-added-to-table.html

<html>
<head>
<script src="../../resources/testharness.js"></script>
<script src="../../resources/testharnessreport.js"></script>
<script>
var t = async_test();
function loaded() {
    var selection = window.getSelection();
    var range =  document.createRange();
    range.selectNode(document.getElementById("selectMe"));
    selection.addRange(range);

    var table = document.createElement("table");
    document.getElementById('form').appendChild(table);
    t.done();
}
</script>
</head>
<body onload="loaded()">
<table><tr><td id="selectMe">This test passes if it does not crash.</td></tr><form style="display:inline" id="form"></form></table>
</body>
</html>