<!DOCTYPE html>
<html>
<head>
<script>
if (window.testRunner)
    testRunner.dumpAsText();

onload = function() {
    document.replaceChild(document.body.firstElementChild, document.documentElement);
    var selection = getSelection();
    document.execCommand('SelectAll');
    document.getElementById('target').contentEditable = true;
    document.execCommand('Delete');
    document.documentElement.textContent = 'PASS if Blink doesn\'t crash.';
};
</script>
</head>
<body>
<div><span id="target">mnop</span>xyz</div>
</body>
</html>