chromium/third_party/blink/web_tests/http/tests/security/contentSecurityPolicy/resources/target-for-frame-that-navigates-itself.html

<!DOCTYPE html>
<html>
<body>
  We should not get here - CSP from frame-src-child-frame-navigates-itself.html
  should prevent navigation to an origin other than https://localhost:8443.
  <script>
    top.postMessage('loaded', '*');
  </script>
</body>
</html>