chromium/third_party/blink/web_tests/http/tests/security/contentSecurityPolicy/resources/post-message-pass.html

<script>
window.parent.postMessage("PASS", "*");
</script>