1 files changed, 22 insertions, 0 deletions
diff --git a/testing/web-platform/tests/editing/crashtests/enableInlineTableEditing-after-updating-selection-range-cross-shadow-dom-boundary.html b/testing/web-platform/tests/editing/crashtests/enableInlineTableEditing-after-updating-selection-range-cross-shadow-dom-boundary.html
new file mode 100644
index 0000000000..b248e03ea0
--- /dev/null
+++ b/testing/web-platform/tests/editing/crashtests/enableInlineTableEditing-after-updating-selection-range-cross-shadow-dom-boundary.html
@@ -0,0 +1,22 @@
+<!doctype html>
+<html>
+<head>
+<meta charset="utf-8">
+<script>
+"use strict";
+
+document.addEventListener("DOMContentLoaded", () => {
+  window.find("A");
+  const range = document.createRange();
+  getSelection().addRange(range);
+  range.setEnd(document.querySelector("template").content, 0);
+  document.execCommand("enableInlineTableEditing", false, "true");
+});
+</script>
+<body>
+<template>
+</template>
+A
+<time contenteditable></time>
+</body>
+</html>