chromium/third_party/blink/web_tests/external/wpt/cors/resources/image-tainting-checker.sub.html

<!DOCTYPE html>
<body>
<canvas id="canvas"></canvas>
<script>
// Used by image-tainting-in-cross-origin-iframe.sub.html to check that an
// image resource loaded by the top level frame that is same-origin to the
// frame isn't treated as a same-origin resource in a cross-origin iframe.
const canvas = document.getElementById('canvas');
const ctx = canvas.getContext('2d');
const img = new Image();
img.src = 'http://{{host}}:{{ports[http][0]}}/images/blue-png-cachable.py';
img.onload = () => {
  ctx.drawImage(img, 0, 0);
  try {
    ctx.getImageData(0, 0, 1, 1);
    parent.postMessage('FAIL: getImageData() didn\'t throw', '*');
  } catch (e) {
    parent.postMessage('DONE', '*');
  }
};
</script>
</body>