public void TrapInjectableJavascript() { var url = "javascript: alert(1);void(0));"; Assert.IsTrue(UrlUtility.InjectableJavascriptDetected(url), url); url = " JAVASCRIPT : alert(1);void(0));"; Assert.IsTrue(UrlUtility.InjectableJavascriptDetected(url), url); url = "javascript:alert(1);void(0);"; Assert.IsTrue(UrlUtility.InjectableJavascriptDetected(url), url); url = "http://javascript.com/someurl"; Assert.IsFalse(UrlUtility.InjectableJavascriptDetected(url), url); url = "https://preview.voat.co/v/test/comments/1088839/5419812"; Assert.IsFalse(UrlUtility.InjectableJavascriptDetected(url), url); }