third_party/WebKit/LayoutTests/editing/execCommand/crash-on-enter-in-contentEditable-list.html

<script src="../../resources/dump-as-markup.js"></script>
<div>This test passes if it doesn't crash.</div>
<ul contentEditable>
    <li id=foo></li>
</ul>
<script>
window.getSelection().selectAllChildren(foo);
document.execCommand('insertParagraph');
</script>