Reject some previuosly-escaped chars in hostnames.

components/safe_browsing_db/v4_protocol_manager_util_unittest.cc

 // Copyright 2016 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "components/safe_browsing_db/v4_protocol_manager_util.h"
 
 #include <vector>
 
 #include "base/base64.h"
 #include "base/strings/stringprintf.h"
@@ skipping 187 matching lines @@
       {"http://www.google.com.../", "www.google.com", "/", ""},
       {"http://www.google.com/q?", "www.google.com", "/q", ""},
       {"http://www.google.com/q?r?", "www.google.com", "/q", "r?"},
       {"http://www.google.com/q?r?s", "www.google.com", "/q", "r?s"},
       {"http://evil.com/foo#bar#baz", "evil.com", "/foo", ""},
       {"http://evil.com/foo;", "evil.com", "/foo;", ""},
       {"http://evil.com/foo?bar;", "evil.com", "/foo", "bar;"},
       {"http://notrailingslash.com", "notrailingslash.com", "/", ""},
       {"http://www.gotaport.com:1234/", "www.gotaport.com", "/", ""},
       {"  http://www.google.com/  ", "www.google.com", "/", ""},
-      {"http:// leadingspace.com/", "%20leadingspace.com", "/", ""},
-      {"http://%20leadingspace.com/", "%20leadingspace.com", "/", ""},
       {"https://www.securesite.com/", "www.securesite.com", "/", ""},
       {"http://host.com/ab%23cd", "host.com", "/ab%23cd", ""},
-      {"http://host%3e.com//twoslashes?more//slashes", "host>.com",
+      {"http://host%5A.com//twoslashes?more//slashes", "hostz.com",
        "/twoslashes", "more//slashes"},
       {"http://host.com/abc?val=xyz#anything", "host.com", "/abc", "val=xyz"},
       {"http://abc:def@host.com/xyz", "host.com", "/xyz", ""},
-      {"http://host%3e.com/abc/%2e%2e%2fdef", "host>.com", "/def", ""},
+      {"http://host%5a.com/abc/%2e%2e%2fdef", "hostz.com", "/def", ""},
       {"http://.......host...com.....//abc/////def%2F%2F%2Fxyz", "host.com",
        "/abc/def/xyz", ""},
       {"ftp://host.com/foo?bar", "host.com", "/foo", "bar"},
       {"data:text/html;charset=utf-8,%0D%0A", "", "", ""},
       {"javascript:alert()", "", "", ""},
       {"mailto:abc@example.com", "", "", ""},
   };
   for (size_t i = 0; i < arraysize(tests); ++i) {
     SCOPED_TRACE(base::StringPrintf("Test: %s", tests[i].input_url));
     GURL url(tests[i].input_url);
 
     std::string canonicalized_hostname;
     std::string canonicalized_path;
     std::string canonicalized_query;
     V4ProtocolManagerUtil::CanonicalizeUrl(url, &canonicalized_hostname,
                                            &canonicalized_path,
                                            &canonicalized_query);
 
     EXPECT_EQ(tests[i].expected_canonicalized_hostname, canonicalized_hostname);
     EXPECT_EQ(tests[i].expected_canonicalized_path, canonicalized_path);
     EXPECT_EQ(tests[i].expected_canonicalized_query, canonicalized_query);
   }
 }
 
 }  // namespace safe_browsing