Codebase Browser
chromium
Go to App

chromium/third_party/blink/web_tests/fast/forms/range/range-type-change-crash.html 

<!DOCTYPE html>
<body>
<script src="../../../resources/js-test.js"></script>
<input type="range" onchange="test()" id="input" />
<script>
function test() {
    document.body.appendChild(document.getElementById("input")).setAttribute('type', 'text');
    testPassed('if not crashed.');
}

description('Check if Blink doesn\'t crash by shadow destruction in mouse click.');
if (!window.eventSender) {
   debug('Change the slider value by mouse clicking.');
} else {
    eventSender.mouseMoveTo(input.offsetLeft, input.offsetTop);
    eventSender.mouseDown();
    eventSender.mouseUp();
}
</script>
</body>