chromium/third_party/blink/web_tests/fast/forms/range/range-input-dynamic-oninput.html

<html>
<head>
<script>
var wasLog = false;
function log(msg) {
    wasLog = true;
    document.getElementById('log').appendChild(document.createTextNode(msg + '\n'));
}

function test() {
    if (window.testRunner)
        testRunner.dumpAsText();

    var input = document.getElementsByTagName('input')[0]
    input.value = 200;
    if (!wasLog && input.value === "100")
        log('PASS');
}
</script>
</head>
<body onload="test()">
<p>
  This page tests that setting the value of an <tt>&lt;input type=range&gt;</tt>
  element to an out-of-range value does not fire the <tt>oninput</tt> event.
</p>
<input type=range oninput="log('FAIL')" min=0 max=100 value=50>
<pre id="log"></pre>
</body>
</html>