<!DOCTYPE html> | |
<script src="/resources/testharness.js"></script> | |
<script src="/resources/testharnessreport.js"></script> | |
<meta http-equiv="Content-Security-Policy" content="frame-src 'none'"> | |
<body> | |
<script> | |
var t = async_test("<iframe src='javascript:...'> not blocked by 'frame-src'"); | |
var i = document.createElement('iframe'); | |
i.src = "javascript:window.top.t.done();"; | |
document.body.appendChild(i); | |
</script> |