xss-DENIED-from-data-url-in-foreign-domain-window-open.html

<html>
<head>
    <script src="../resources/cross-frame-access.js"></script>
    <script>
        var openedWindow;
        window.onload = function()
        {
            if (window.testRunner) {
                testRunner.dumpAsText();
                testRunner.waitUntilDone();
                testRunner.setPopupBlockingEnabled(false);
            }

            openedWindow = window.open("http://localhost:8000/security/dataURL/resources/foreign-domain-data-url-accessor-opened-frame.html");

            window.addEventListener('message', function (ev)
            {
                document.getElementById("result").textContent = ev.data;
                closeWindowAndNotifyDone(openedWindow);
            });
        }
    </script>
</head>
<body>
    <p>Opener Frame</p>
    <p id='accessMe'>Pass: Cross frame access from a data: URL on a different domain was denied.</p>
    <p id='result'>n/a</p>
</body>
</html>

chromium/third_party/blink/web_tests/http/tests/security/dataURL/xss-DENIED-from-data-url-in-foreign-domain-window-open.html