Hangouts Remote Desktop Part VI - Show confirm dialog before retrieving access code

remoting/webapp/unittests/base_unittest.js

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 (function() {
 
 'use strict';
 
 module('base');
 
@@ skipping 57 matching lines @@
       a: 'a',
       foo: 'foo',
       escapist: ':/?#[]@$&+,;='
     });
     QUnit.equal(
         result,
         'http://www.chromium.org?a=a&foo=foo' +
         '&escapist=%3A%2F%3F%23%5B%5D%40%24%26%2B%2C%3B%3D');
 });
 
+test('escapeHTML(str) should escape special characters', function() {
+  QUnit.equal(
+    base.escapeHTML('<script>alert("hello")</script>'),
+    '&lt;script&gt;alert("hello")&lt;/script&gt;');

[Jamie, 2014/08/26 00:54:21]

Are there any other characters that should be escaped?

+});
+
 QUnit.asyncTest('Promise.sleep(delay) should fulfill the promise after |delay|',
   function() {
     var isCalled = false;
     var clock = this.clock;
 
     base.Promise.sleep(100).then(function(){
       isCalled = true;
       ok(true, 'Promise.sleep() is fulfilled after delay.');
       QUnit.start();
     });
@@ skipping 138 matching lines @@
 
     source.addEventListener('foo', sink.listener);
     source.raiseEvent('foo');
     sinon.assert.calledOnce(sink.listener);
 
     source.raiseEvent('foo');
     sinon.assert.calledOnce(sink.listener);
 });
 
 })();