LayoutTests/http/tests/security/resources/xss-DENIED-assign-location-reload-attacker.html

<script>
var victim = parent;

victim.location.replace = "hax0red";
</script>