--- a/tests/test-url.py	Wed Mar 30 20:00:24 2011 -0700
+++ b/tests/test-url.py	Wed Mar 30 20:01:31 2011 -0700
@@ -158,6 +158,13 @@
     >>> url('/x///z/y/')
     <url path: '/x///z/y/'>
 
+    Non-localhost file URL:
+
+    >>> u = url('file://mercurial.selenic.com/foo')
+    Traceback (most recent call last):
+      File "<stdin>", line 1, in ?
+    Abort: file:// URLs can only refer to localhost
+
     Empty URL:
 
     >>> u = url('')