frame_with_allowed_script.html

<html>
  <head>
    <script src="included_allowed_script.js"></script>
  </head>
</html>