foreign-domain-data-url-window-location.html

<html>
<body>
    <p>Inner iframe on a foreign domain.</p>
    <script>
        var url = "data:text/html,<html>"
            + "<head>"
            +     "<scr" + "ipt>"
            +         "function loaded() {"
            +             "window.parent.postMessage('run test', '*');"
            +         "}"
            +     "</scri" + "pt>"
            + "</head>"
            + "<body onload='loaded();'>"
            +     "<p id='accessMe'>PASS: Cross frame access from a frame on a foreign domain denied!</p>"
            +     "<p>Inner iframe. This iframe (which is data: URL and whose parent is on a foreign domain) is the frame that the"
            +     " main frame is trying to access.  It should not have access to it.</p>"
            + "</body>"
            + "</html>";

        window.location = url;
    </script>
</body>
</html>

chromium/third_party/blink/web_tests/http/tests/security/dataURL/resources/foreign-domain-data-url-window-location.html