editor/libeditor/crashtests/766360.html

   1 <!DOCTYPE html>
   2 <html>
   3 <head>
   4 <script>
   5
   6 function boom()
   7 {
   8   var r = document.createRange();
   9   r.setEnd(document.createTextNode("x"), 0);
  10   window.getSelection().addRange(r);
  11   document.execCommand("inserthtml", false, "y");
  12 }
  13
  14 </script>
  15 </head>
  16
  17 <body contenteditable="true" onload="boom();"></body>
  18 </html>