1 files changed, 28 insertions, 0 deletions
diff --git a/chrome/browser/ui/omnibox/omnibox_view_unittest.cc b/chrome/browser/ui/omnibox/omnibox_view_unittest.cc
new file mode 100644
index 0000000..d017bff
--- /dev/null
+++ b/chrome/browser/ui/omnibox/omnibox_view_unittest.cc
@@ -0,0 +1,28 @@
+// Copyright (c) 2011 The Chromium Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+#include "chrome/browser/ui/omnibox/omnibox_view.h"
+#include "base/string16.h"
+#include "base/string_util.h"
+#include "base/utf_string_conversions.h"
+#include "testing/gtest/include/gtest/gtest.h"
+
+TEST(OmniboxView, TestStripSchemasUnsafeForPaste) {
+  const char* urls[] = {
+    "http://www.google.com?q=javascript:alert(0)",  // Safe URL.
+    "javAscript:alert(0)",                          // Unsafe JS URL.
+    "jaVascript:\njavaScript: alert(0)"             // Single strip unsafe.
+  };
+
+  const char* expecteds[] = {
+    "http://www.google.com?q=javascript:alert(0)",  // Safe URL.
+    "alert(0)",                                     // Unsafe JS URL.
+    "alert(0)"                                      // Single strip unsafe.
+  };
+
+  for (size_t i = 0; i < arraysize(urls); i++) {
+    EXPECT_EQ(ASCIIToUTF16(expecteds[i]),
+              OmniboxView::StripJavascriptSchemas(ASCIIToUTF16(urls[i])));
+  }
+}