1 files changed, 23 insertions, 0 deletions
diff --git a/editor/libeditor/crashtests/407256-1.html b/editor/libeditor/crashtests/407256-1.html
new file mode 100644
index 000000000..824162ac5
--- /dev/null
+++ b/editor/libeditor/crashtests/407256-1.html
@@ -0,0 +1,23 @@
+<html>
+<head>
+<script type="text/javascript">
+
+function boom()
+{
+  document.addEventListener("DOMNodeInserted", x, false);
+    
+  function x()
+  {
+    document.removeEventListener("DOMNodeInserted", x, false);
+    document.execCommand("insertParagraph", false, "");
+  }
+
+  document.execCommand("insertorderedlist", false, "");
+}
+
+</script>
+</head>
+
+<body contenteditable="true" onload="boom()"></body>
+
+</html>