LayoutTests/fast/loader/comment-only-javascript-url.html

<!DOCTYPE html>
<html>
<head>
<script src="../../resources/js-test.js"></script>
<script>
if (window.testRunner) {
    testRunner.waitUntilDone();
    testRunner.dumpAsText();
}
jsTestIsAsync = true;
var count = 0;
</script>
</head>
<body>
<script>
function maybeClick(url) {
    const parser = document.createElement('a');
    parser.href = url;
    parser.click();
}

description("Tests that we properly handle JavaScript URLs containing comment characters, newlines, and carriage returns.");

const ignoreCases = [
    "javascript:// A fun test%0aalert(count); ++count;",
    "javascript://:%0aalert(count); ++count;",
    "javascript://:%0dalert(count); ++count;",
    "javascript://:%0a%0dalert(count); ++count;"
];

const executeCases = [
    "javascript:alert(count); ++count;",
    "javascript://%0a://%0dalert(count); ++count;",
    "javascript://%0d//:%0aalert(count); ++count;"
];

for (const c of ignoreCases)
    maybeClick(c);

setTimeout(function () {
    if (count)
        testFailed("A to be ignored JavaScript URL was executed.");
    else
        testPassed("Ignorable JavaScript URLs were ignored.");

    for (const c of executeCases)
        maybeClick(c);

    setTimeout(() => {
        if (count != executeCases.length)
            testFailed("An executable JavaScript URLs was ignored.");
        else
            testPassed("All executable JavaScript URLs were executed.");

        finishJSTest();
    }, 0);
}, 0);
</script>
</body>
</html>