Canonicalize URL before using Extractscheme in DoFindAndCompareScheme functio...

src/url_util_unittest.cc

 // Copyright 2008, Google Inc.
 // All rights reserved.
 //
 // Redistribution and use in source and binary forms, with or without
 // modification, are permitted provided that the following conditions are
 // met:
 //
 //     * Redistributions of source code must retain the above copyright
 // notice, this list of conditions and the following disclaimer.
 //     * Redistributions in binary form must reproduce the above
@@ skipping 46 matching lines @@
 
   // When there is an empty scheme, it should match the empty scheme.
   const char kStr3[] = ":foo.com/";
   EXPECT_TRUE(url_util::FindAndCompareScheme(
       kStr3, static_cast<int>(strlen(kStr3)), "", &found_scheme));
   EXPECT_TRUE(found_scheme == url_parse::Component(0, 0));
 
   // But when there is no scheme, it should fail.
   EXPECT_FALSE(url_util::FindAndCompareScheme("", 0, "", &found_scheme));
   EXPECT_TRUE(found_scheme == url_parse::Component());
+
+  // When there is a ctrl char in scheme, it should canonicalize the url before
+  // comparison.
+  const char ctrlStr[] = " \r\n\tjav\ra\nscri\tpt:alert(1)";
+  EXPECT_TRUE(url_util::FindAndCompareScheme(
+      ctrlStr, static_cast<int>(strlen(ctrlStr)), "javascript", &found_scheme));
+  EXPECT_TRUE(found_scheme == url_parse::Component(1, 10));
 }
 
 TEST(URLUtilTest, ReplaceComponents) {
   url_parse::Parsed parsed;
   url_canon::RawCanonOutputT<char> output;
   url_parse::Parsed new_parsed;
 
   // Check that the following calls do not cause crash
   url_canon::Replacements<char> replacements;
   replacements.SetRef("test", url_parse::Component(0, 4));
@@ skipping 60 matching lines @@
   // Magic Windows drive letter behavior when converting to a file URL.
   EXPECT_EQ("file:///E:/foo/",
             CheckReplaceScheme("http://localhost/e:foo/", "file"));
 #endif
 
   // This will probably change to "about://google.com/" when we fix
   // http://crbug.com/160 which should also be an acceptable result.
   EXPECT_EQ("about://google.com/",
             CheckReplaceScheme("http://google.com/", "about"));
 }