Tests that the confirm form does not use external destinations.
function testConfirmForm() {
$this
->drupalGet('user/1/cancel');
$this
->assertCancelLinkUrl(url('user/1'));
$this
->drupalGet('user/1/cancel', array(
'query' => array(
'destination' => 'node',
),
));
$this
->assertCancelLinkUrl(url('node'));
$this
->drupalGet('user/1/cancel', array(
'query' => array(
'destination' => 'http://example.com',
),
));
$this
->assertCancelLinkUrl(url('user/1'));
}