<!DOCTYPE html>
<body>
  <script src=/resources/testharness.js></script>
  <script src=/resources/testharnessreport.js></script>
  <script src=/feature-policy/resources/featurepolicy.js></script>
  <script>
    run_all_fp_tests_allow_all(
      'http://{{domains[www]}}:{{ports[http][0]}}',
      'document-access',
      'SecurityError',
      () => {
        return new Promise((resolve, reject) => {
        try {
            var iframe = document.createElement('iframe');
            iframe.srcdoc ="<p>same origin iframe</p>";
            document.documentElement.append(iframe);

            // attempt to access something in a same origin iframe that would
            // should be prevented by the feature policy.
            iframe.contentWindow.location.href;
            resolve();
          } catch(e) {
            reject(e);
          }
       });
      });
  </script>
</body>