Index: LayoutTests/editing/inserting/insert-html-to-textarea-crash.html |
diff --git a/LayoutTests/editing/inserting/insert-html-to-textarea-crash.html b/LayoutTests/editing/inserting/insert-html-to-textarea-crash.html |
new file mode 100644 |
index 0000000000000000000000000000000000000000..41555442b4af6384b626f69e391519339e4d1147 |
--- /dev/null |
+++ b/LayoutTests/editing/inserting/insert-html-to-textarea-crash.html |
@@ -0,0 +1,9 @@ |
+<!DOCTYPE html> |
+<textarea></textarea> |
+<script> |
+if (window.testRunner) |
+ testRunner.dumpAsText(); |
+document.querySelector('textarea').setSelectionRange(0, 0); |
+document.execCommand("InsertHTML", false, "<b></b>"); |
+document.body.textContent = 'PASS if Blink doesn\'t crash.'; |
+</script> |