| <html> |
| <body> |
| <p>Inner iframe on a foreign domain.</p> |
| <script> |
| var url = "data:text/html,<html>" |
| + "<body>" |
| + "<p id='accessMe'>PASS: Cross frame access from a frame on a foreign domain denied!</p>" |
| + "<p>Inner iframe. This iframe (which is data: URL and whose parent is on a foreign domain) is the frame that the" |
| + " main frame is trying to access. It should not have access to it.</p>" |
| + "<iframe style='width: 0px; height: 0px;' id='flag'></iframe>" |
| + "</body>" |
| + "</html>"; |
| |
| window.location = url; |
| </script> |
| </body> |
| </html> |