<script>
parent.attack = function() {
    document.fail = "FAIL";
}
window.location = "http://localhost:8000/security/resources/cross-frame-iframe-for-document-direct-test-victim.html";
</script>