chromium/third_party/blink/web_tests/fast/loader/javascript-url-in-object-expected.txt

This tests that javascript: urls in an object tag do not get executed.