editor/libeditor/crashtests/1556799.html

   1 <script>
   2 function onError() {
   3   // For emulating the traditional behavior, collapse Selection to end of the
   4   // text node in the <dl> which is the last deepest child of the <body>.
   5   const dl =  document.querySelector("dl");
   6   getSelection().collapse(dl.lastChild, dl.lastChild.length);
   7   getSelection().selectAllChildren(
   8     document.querySelector("img")
   9   );
  10   document.execCommand("insertUnorderedList");
  11   document.execCommand("enableObjectResizing");
  12 }
  13 </script>
  14 <dd contenteditable="true">
  15 <audio src="data:text/html,foo" onerror="onError()">
  16 <img></img>
  17 <dl>
  18 </dl></audio><dd></body>