<!DOCTYPE html>
<html>
<head>
    <script src="/js-test-resources/js-test.js"></script>
    <script>
        description("Tests that a cross-origin image load inside an about:blank iframe fails if the server blocks it with a 'From-Origin: same' response header.");
        jsTestIsAsync = true;

        function imageLoadError() {
            testPassed("Image load blocked.");
            finishJSTest();
        }

        function imageLoadSuccess() {
            testFailed("Image load succeeded.");
            finishJSTest();
        }

        function injectImageIntoIframe() {
            var imgElement = new Image();
            imgElement.src = "http://localhost:8000/from-origin/resources/image.php?fromOrigin=same";
            imgElement.onload = imageLoadSuccess;
            imgElement.onerror = imageLoadError;
            document.getElementById("theIframe").contentDocument.body.appendChild(imgElement);
        }
    </script>
</head>
<body onload="injectImageIntoIframe()">
<iframe src="about:blank" id="theIframe"></iframe>
</body>
</html>