1 files changed, 31 insertions, 0 deletions
diff --git a/testing/web-platform/tests/editing/crashtests/delete-content-in-no-data-object.html b/testing/web-platform/tests/editing/crashtests/delete-content-in-no-data-object.html
new file mode 100644
index 0000000000..749dba303b
--- /dev/null
+++ b/testing/web-platform/tests/editing/crashtests/delete-content-in-no-data-object.html
@@ -0,0 +1,31 @@
+<!doctype html>
+<html class="test-wait">
+<head>
+<meta charset="utf-8">
+<script>
+document.addEventListener("DOMContentLoaded", () => {
+  requestAnimationFrame(() => {
+    setTimeout(() => {
+      document.execCommand("delete");
+      document.documentElement.removeAttribute("class");
+    }, 0);
+    document.execCommand("insertImage", false, "x");
+  });
+  document.execCommand("justifyCenter");
+})
+function onError() {
+  document.querySelector("s").before("BEFORE");
+  document.designMode = "on";
+  const img = document.querySelector("img");
+  img.innerHTML = "IMG";
+  getSelection().setBaseAndExtent(document.querySelector("kbd"), 0, img, 1);
+}
+</script>
+</head>
+<body><object onerror="onError()">
+<s>
+<img>
+SSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSS
+<kbd>
+</kbd></s></object></body>
+</html>