third_party/WebKit/LayoutTests/fast/loader/javascript-url-in-embed.html

<script>
    if (window.testRunner)
        testRunner.dumpAsText();
</script>
<p>This tests that javascript: urls in an embed tag do not get executed.</p>
<embed src="javascript:alert('FAIL - javascript: url url was executed.');"></embed>