LayoutTests/fast/parser/resources/set-parent-to-javascript-url.html

<script>
alert(1);
parent.document.getElementsByTagName('iframe')[0].src = "javascript:alert(2),'PASS<script>alert(3)<\/script>'";
alert(4);
parent.setTimeout("done()", 0);
</script>