third_party/blink/web_tests/editing/execCommand/4916235.html

<p>This tests for a crash when performing InsertOrderedList on an unordered list item.  You should see 'foo' and 'bar' each in their own ordered list items.</p>
<div id="div" contenteditable="true"><ul><li id="li1">foo</li><li id="li2">bar<br></li></ul></div>

<script>
if (window.testRunner)
    testRunner.dumpAsText();
    
var li = document.getElementById("li1");
var sel = window.getSelection();

sel.setBaseAndExtent(li, 0, li, li.childNodes.length);
document.execCommand("InsertOrderedList");

li = document.getElementById("li2");
sel.setBaseAndExtent(li, 0, li, li.childNodes.length);
document.execCommand("InsertOrderedList");
</script>