<!DOCTYPE html>
<span style="display: grid" contenteditable=plaintext-only>
<script>
if (window.testRunner)
    testRunner.dumpAsText();

function crash() {
    if (!window.eventSender)
        return;
    eventSender.keyDown("\t");
    eventSender.keyDown("X");
    document.designMode = 'on';
    document.execCommand("InsertHTML", false, "<div>");
}
document.addEventListener("DOMContentLoaded", crash, false);
</script>The test checks that we don't leave stale pointers into the internal grid representation.<br> This test has PASSED if it didn't crash under ASAN.