| OLD | NEW | 
|---|
| (Empty) |  | 
|  | 1 <!DOCTYPE html> | 
|  | 2 <span style="display: grid" contenteditable=plaintext-only> | 
|  | 3 <script> | 
|  | 4 if (window.testRunner) | 
|  | 5     testRunner.dumpAsText(); | 
|  | 6 | 
|  | 7 function crash() { | 
|  | 8     if (!window.eventSender) | 
|  | 9         return; | 
|  | 10     eventSender.keyDown("\t"); | 
|  | 11     eventSender.keyDown("X"); | 
|  | 12     document.designMode = 'on'; | 
|  | 13     document.execCommand("InsertHTML", false, "<div>"); | 
|  | 14 } | 
|  | 15 document.addEventListener("DOMContentLoaded", crash, false); | 
|  | 16 </script>The test checks that we don't leave stale pointers into the internal gr
    id representation.<br> This test has PASSED if it didn't crash under ASAN. | 
| OLD | NEW | 
|---|