tests/tests/webkitsecurity/assets/destroy-cell-with-selection-crash.html

<script>
if (window.layoutTestController)
    layoutTestController.dumpAsText();
</script>
Test doing display:none for a cell in table with selection. This passes if it does not crash.
<table style="border-collapse: collapse">
    <td id=c0></td>
    <td id=c1></td>
</table>
<script>
var c0 = document.getElementById('c0');
var c1 = document.getElementById('c1');
var selection = window.getSelection();
selection.setBaseAndExtent(c0, 0, c1, 0);
c1.style.display = 'none';
</script>