chromium/third_party/blink/web_tests/http/tests/security/xss-DENIED-assign-location-href-javascript.html

<html>
<script>
if (window.testRunner) {
  testRunner.dumpAsText();
  testRunner.dumpChildFrames();
  testRunner.setDumpConsoleMessages(false);
}

function runTest() {
  frames[0].location.href = 'javascript:3'; 
}

</script>
<body>
<iframe onload="runTest()" src="http://localhost:8000/security/resources/localPage.html"></iframe>
</body>
</html>