| <!DOCTYPE html> |
| <html> |
| <body> |
| <p>This test loads a secure iframe that loads an insecure image inside a blob URL iframe. |
| A blob URL created in a secure context is considered secure. We should trigger a mixed content |
| block because the blob URL grandchild iframe inherited the CSP directive block-all-mixed-content |
| from the child frame. This test PASSED if the grandchild iframe is filled solid green. |
| Otherwise, it FAILED.</p> |
| <iframe srcdoc="<iframe srcdoc='<style>body { background: green }</style>'></iframe>" width="100%" height="300"></iframe> |
| </body> |
| </html> |
