LayoutTests/http/tests/security/resources/xss-DENIED-assign-location-nonstandardProperty-attacker.html

<script>
var victim = parent;

victim.location.nonstandardProperty = "hax0red";
</script>