xss-DENIED-window-open-javascript-url-with-spaces.html

<!DOCTYPE html>
<html>
<head>
<script>
if (window.testRunner) {
    testRunner.dumpAsText();
    testRunner.setDumpConsoleMessages(false);
    testRunner.waitUntilDone();
}
function runTest() {
    // Schedule a return to the main event loop so that the javascript: URL
    // has a chance to run.
    setTimeout(done, 0);
    window.open("\x20\x09\x0a\x0djavascript:alert('FAIL')", "tg");
}
function done() {
    if (window.testRunner)
        testRunner.notifyDone();
}
</script>
</head>
<body>
This test passes if there is no alert dialog.<br>
<iframe onload="runTest()" name="tg"
        src="http://localhost:8080/security/resources/innocent-victim.html"
    ></iframe> 
</body>
</html>

chromium/third_party/blink/web_tests/http/tests/security/xss-DENIED-window-open-javascript-url-with-spaces.html