LayoutTests/http/tests/security/resources/xss-DENIED-assign-location-hash-attacker.html

<script>
var victim = parent;

victim.location.hash = "hax0red";
</script>