LayoutTests/http/tests/security/XFrameOptions/x-frame-options-deny.html

<script>
    if (window.testRunner) {
        testRunner.dumpAsText();
        testRunner.dumpChildFramesAsText();
        testRunner.dumpResourceLoadCallbacks();
        testRunner.waitUntilDone();
    }

    function checkIfDone() {
        try {
            var url = document.querySelector('iframe').contentWindow.location.href;
            console.log("FAIL: Could read contentWindow.location.href");
        } catch (e) {
            console.log(e);
            console.log("PASS: Could not read contentWindow.location.href");
        }
        testRunner.notifyDone();
    }
</script>

<p>There should be no content in the iframe below</p>
<iframe style="width:500px; height:500px" src="http://127.0.0.1:8000/security/XFrameOptions/resources/x-frame-options-deny.cgi" onload="checkIfDone()"></iframe>