blob-url-script-in-data-iframe.https.html

<!DOCTYPE html>
<script src="/resources/testharness.js"></script>
<script src="/resources/testharnessreport.js"></script>
<body>
<script>
async_test(t => {
    assert_equals(location.protocol, "https:");

    var f = document.createElement("iframe");
    window.addEventListener("message", t.step_func(e => {
        if (e.source !== f.contentWindow)
            return;
        assert_equals(e.data, "PASS");
        t.done();
    }));
    f.src = "data:text/html," + encodeURIComponent(`
        <script>
        var url = URL.createObjectURL(new Blob(["parent.postMessage('PASS', '*');"]));
        var s = document.createElement("script");
        s.src = url;
        document.head.appendChild(s);
        <\/script>
    `);
    document.body.appendChild(f);
}, "'data:' URL frames can load 'blob:' resources.");
</script>
</body>

chromium/third_party/blink/web_tests/http/tests/security/mixedContent/blob-url-script-in-data-iframe.https.html