1 files changed, 21 insertions, 0 deletions
diff --git a/editor/libeditor/crashtests/1474978.html b/editor/libeditor/crashtests/1474978.html
new file mode 100644
index 0000000000..d7eb01e03b
--- /dev/null
+++ b/editor/libeditor/crashtests/1474978.html
@@ -0,0 +1,21 @@
+<script>
+function onLoad() {
+  const dd = document.querySelector("dd[contenteditable]");
+  // For emulating the traditional behavior, collapse Selection to end of the
+  // text node at end of the <dd contenteditable> which is the deepest last
+  // child of the <body> (end of the text node after the <template>).
+  getSelection().collapse(dd.lastChild, dd.lastChild.length);
+  getSelection().setPosition(
+    document.querySelector("template")
+  );
+  dd.addEventListener("DOMNodeInserted", () => {
+    document.execCommand("selectAll");
+    document.execCommand("insertText", false, "");
+  });
+  document.execCommand("insertImage", false, "#");
+}
+</script>
+<body onload="onLoad()">
+<dd contenteditable>
+<template></template>
+</dd></body>