third_party/WebKit/LayoutTests/editing/execCommand/unlistify-body-crash.html

   1 <!DOCTYPE html>
   2 <html>
   3 <head>
   4 <script>
   5 if (window.testRunner)
   6     testRunner.dumpAsText();
   7
   8 function doReplace(tagName) {
   9     var oldElement = document.getElementById(tagName);
  10     var newElement = document.createElement(tagName);
  11     while (oldElement.firstChild) {
  12         newElement.appendChild(oldElement.firstChild);
  13     }
  14     oldElement.parentNode.replaceChild(newElement, oldElement);
  15 }
  16 onload = function() {
  17     doReplace('body');
  18
  19     document.designMode = 'on';
  20     getSelection().collapse(document.querySelector('li'), 1);
  21     document.execCommand('InsertUnorderedList');
  22     document.documentElement.textContent = 'PASS if Blink doesn\'t crash.';
  23 };
  24 </script>
  25 </head>
  26 <body>
  27 <h6><ul><li><div id="body"><h6>bar<ul></ul></h6></div><br></li></ul></h6>
  28 </body>
  29 </html>