1 files changed, 58 insertions, 0 deletions
diff --git a/editor/libeditor/crashtests/759748.html b/editor/libeditor/crashtests/759748.html
new file mode 100644
index 0000000000..1e85a3877d
--- /dev/null
+++ b/editor/libeditor/crashtests/759748.html
@@ -0,0 +1,58 @@
+<!doctype html>
+<body>
+<script>
+var cmds = {
+  bold: "",
+  italic: "",
+  underline: "",
+  strikethrough: "",
+  subscript: "",
+  superscript: "",
+  cut: "",
+  copy: "",
+  paste: "",
+  delete: "",
+  forwarddelete: "",
+  selectall: "",
+  undo: "",
+  redo: "",
+  indent: "",
+  outdent: "",
+  backcolor: "#888888",
+  forecolor: "#888888",
+  hilitecolor: "#888888",
+  fontname: "Courier",
+  fontsize: "6",
+  increasefontsize: "",
+  decreasefontsize: "",
+  inserthorizontalrule: "",
+  createlink: "foo",
+  insertimage: "foo",
+  inserthtml: "foo",
+  inserttext: "foo",
+  insertparagraph: "",
+  gethtml: "",
+  justifyleft: "",
+  justifyright: "",
+  justifycenter: "",
+  justifyfull: "",
+  removeformat: "",
+  unlink: "",
+  insertorderedlist: "",
+  insertunorderedlist: "",
+  formatblock: "h1",
+  heading: "h1",
+  stylewithcss: "true",
+  usecss: "true",
+  contentreadonly: "true",
+  readonly: "true",
+  insertbronreturn: "true",
+  enableobjectresizing: "true",
+  enableinlinetableediting: "true",
+};
+for (var k in cmds) {
+  document.body.innerHTML = "<div contenteditable>abc</div>";
+  getSelection().removeAllRanges();
+  try { document.execCommand(k, false, cmds[k]) } catch(e) {}
+}
+</script>