1 files changed, 16 insertions, 0 deletions
diff --git a/testing/web-platform/tests/editing/crashtests/set-selection-range-after-updating-textarea-default-value.html b/testing/web-platform/tests/editing/crashtests/set-selection-range-after-updating-textarea-default-value.html
new file mode 100644
index 0000000000..421306fc96
--- /dev/null
+++ b/testing/web-platform/tests/editing/crashtests/set-selection-range-after-updating-textarea-default-value.html
@@ -0,0 +1,16 @@
+<!doctype html>
+<html>
+<head>
+<meta charset="utf-8">
+<script>
+addEventListener("load", () => {
+  const textarea = document.createElement("textarea");
+  document.documentElement.appendChild(textarea);
+  textarea.focus();
+  textarea.dir = "rtl";
+  textarea.prepend("0123456789A", document.createElement("marquee"));
+  textarea.setSelectionRange(8, 13, "");
+});
+</script>
+</head>
+</html>