<script>
if (window.layoutTestController) {
    layoutTestController.dumpAsText();
    layoutTestController.waitUntilDone();
}

function success()
{
    document.getElementById("console").innerHTML = "PASS: cross-site assignment of location.pathname not allowed";
    if (window.layoutTestController)
        layoutTestController.notifyDone();
}
</script>

<body onload="success()">

    <iframe src="http://localhost:8000/security/resources/xss-DENIED-assign-location-pathname-attacker.html"></iframe>

<div id="console"></div>
</body>
</html>