document-prototype.html | Explore in Territory

<!DOCTYPE html>
<html>
<body>
<div id="console"></div>
<script>
document.__proto__.foo = "FAIL: Visible in isolated world.";
if (window.testRunner) {
  testRunner.dumpAsText();
  testRunner.evaluateScriptInIsolatedWorld(
    1,
    "document.getElementById('console').innerHTML = document.foo");
}
</script>
</body>
</html>

chromium/third_party/blink/web_tests/http/tests/security/isolatedWorld/document-prototype.html