Escape javascript going into text notifications.

chrome/browser/notifications/desktop_notifications_unittest.cc

 // Copyright (c) 2009 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/notifications/desktop_notifications_unittest.h"
 
 // static
 const int MockBalloonCollection::kMockBalloonSpace = 5;
 
 // static
@@ skipping 232 matching lines @@
   // Create some toasts and then prematurely delete the notification service,
   // just to make sure nothing crashes/leaks.
   for (int id = 0; id <= 3; ++id) {
     EXPECT_TRUE(service_->ShowDesktopNotificationText(
         GURL("http://www.google.com"),
         GURL("/icon.png"), ASCIIToUTF16("Title"), ASCIIToUTF16("Text"),
         0, 0, DesktopNotificationService::PageNotification, id));
   }
   service_.reset(NULL);
 }
+
+TEST_F(DesktopNotificationsTest, TestUserInputEscaping) {
+  // Create a test script with some HTML; assert that it doesn't get into the
+  // data:// URL that's produced for the balloon.
+  EXPECT_TRUE(service_->ShowDesktopNotificationText(
+      GURL("http://www.google.com"),
+      GURL("/icon.png"), ASCIIToUTF16("<script>window.alert('uh oh');</script>"),
+      ASCIIToUTF16("<i>this text is in italics</i>"),
+      0, 0, DesktopNotificationService::PageNotification, 1));
+  
+  MessageLoopForUI::current()->RunAllPending();
+  EXPECT_EQ(1, balloon_collection_->count());
+  Balloon* balloon = (*balloon_collection_->balloons().begin());
+  GURL data_url = balloon->notification().content_url();
+  EXPECT_EQ(std::string::npos, data_url.spec().find("<script>"));
+  EXPECT_EQ(std::string::npos, data_url.spec().find("<i>"));
+}
+