xss-DENIED-to-data-url-sub-frame.html

<html>
<head>
    <script src="../resources/cross-frame-access.js"></script>
</head>
<body>
    <p>This tests that the main frame can't access the contents of an iframe that contains a data: URL loaded page</p>
    <iframe id="aFrame" name="aFrame"></iframe>
    <pre id="console"></pre>
    <script>
        var url = "data:text/html,<html><scr" + "ipt>onload = function() { parent.postMessage(\'LOADED\', \'*\'); } </scr" + "ipt><body><p id=\'accessMe\'></p><p>Inner iframe.</p></body></html>";
        var iframeId ="aFrame";
        var passMessage = "PASS: Cross frame access to a data: URL was denied.";
        var failMessage = "FAIL: Cross frame access to a data: URL was allowed.";
        cannotAccessFrame(url, iframeId, passMessage, failMessage);
    </script>
</body>
</html>

chromium/third_party/blink/web_tests/http/tests/security/dataURL/xss-DENIED-to-data-url-sub-frame.html