<!DOCTYPE html> | |
<script> | |
var x = 0; | |
</script> | |
<!-- This script's URI is: | |
var xhr = new XMLHttpRequest(); | |
xhr.open('GET', 'data:text/plain,aaa', false); | |
xhr.send(); | |
x=1; | |
--> | |
<script defer src="data:application/javascript,var%20x%20=%200;%20var%20xhr%20=%20new%20XMLHttpRequest();%20xhr.open('GET',%20'data:text/plain,aaa',%20false);%20xhr.send();%20x=1"></script> | |
<!-- This script's URI is: | |
parent.postMessage(x, '*'); | |
--> | |
<script defer src="data:application/javascript,parent.postMessage(x, '*');"></script> | |