chromium/third_party/blink/web_tests/http/tests/security/resources/cross-frame-iframe-callback-explicit-domain-DENY.html

<script src="cross-frame-access.js"></script>
<body>
<pre id=console></pre>
<script>
var parentWindow = window.parent;
parentWindow.testFunction = function()
{
    shouldBeFalse("canGet('parentWindow.location.href')");
    shouldBeTrue("accessThrowsException('parentWindow.location.href')");
    if (window.testRunner)
        testRunner.notifyDone();
}
var func = parentWindow.testFunction;
document.domain = document.domain; // after this window.parent properties are inaccessible
func();
</script>