xss-DENIED-contentWindow-eval.html | Explore in Territory

<body>
This test passes if alert() is not called.
<script>
if (window.testRunner) {
    testRunner.dumpAsText();
    testRunner.waitUntilDone();
}

i = document.body.appendChild(document.createElement("iframe"));
f = frames[0].eval('(function(){location="javascript:alert(location)"})');
i.src = "http://localhost:8000/security/resources/innocent-victim.html";
i.addEventListener("load", f);
i.addEventListener("load", function() {
    if (window.testRunner)
        testRunner.notifyDone();
});
</script>

chromium/third_party/blink/web_tests/http/tests/security/xss-DENIED-contentWindow-eval.html