Fixing iframe jank in the local omnibox popup.

chrome/renderer/chrome_content_renderer_client_unittest.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/renderer/chrome_content_renderer_client.h"
 
 #include "base/utf_string_conversions.h"
 #include "chrome/common/extensions/extension.h"
 #include "chrome/common/extensions/extension_builder.h"
 #include "chrome/common/extensions/extension_manifest_constants.h"
@@ skipping 324 matching lines @@
       GURL("filesystem:chrome-extension://" +
            kRandomExtensionID + "/foo")));
   EXPECT_TRUE(client.IsRequestOSFileHandleAllowedForURL(
       GURL("filesystem:http://127.0.0.1/foo")));
   EXPECT_FALSE(client.IsRequestOSFileHandleAllowedForURL(
       GURL("http://127.0.0.1/foo")));
   EXPECT_TRUE(client.IsRequestOSFileHandleAllowedForURL(
       GURL("filesystem:http://192.168.0.1/foo")));
 }
 
+TEST_F(ChromeContentRendererClientTest, SetOriginForSuggestionRequest) {
+  ChromeContentRendererClient client;
+  // The origin parameter should be set from top_url.
+  EXPECT_EQ(GURL("chrome-search://suggestion/result.js?"
+                 "origin=http://sanity.example.com"),
+            client.SetOriginForSuggestionRequest(
+                GURL("chrome-search://suggestion/result.js"),
+                GURL("http://sanity.example.com")));
+  // Any existing &origin parameter should be replaced by origin=top_url.
+  EXPECT_EQ(GURL("chrome-search://suggestion/result.js?"
+                 "origin=http://evil.example.com"),
+            client.SetOriginForSuggestionRequest(
+                GURL("chrome-search://suggestion/result.js?"
+                     "origin=http://good.example.com/"),
+                GURL("http://evil.example.com")));
+  // Multiple &origin parameters should also be replaced by origin=top_url.
+  EXPECT_EQ(GURL("chrome-search://suggestion/result.js?"
+                 "origin=http://evil.example.com"),
+            client.SetOriginForSuggestionRequest(
+                GURL("chrome-search://suggestion/result.js?"
+                     "origin=http://good.example.com/&"
+                     "origin=http://better.example.com"),
+                GURL("http://evil.example.com")));
+  // A malformed top_url should result in an empty origin.
+  EXPECT_EQ(GURL("chrome-search://suggestion/result.js?origin="),
+            client.SetOriginForSuggestionRequest(
+                GURL("chrome-search://suggestion/result.js"),
+                GURL("\"<script>alert('evil')</script>")));
+}
+
 }  // namespace chrome