<!DOCTYPE html>
<html>
<head>
    <script>
        if (window.testRunner) {
            testRunner.dumpAsText();
            testRunner.dumpChildFramesAsText();
            testRunner.dumpResourceLoadCallbacks();
            testRunner.waitUntilDone();
        }

        function checkIfDone() {
            try {
                var url = document.querySelector('iframe').contentWindow.location.href;
                if (url)
                    console.log("FAIL: Could read contentWindow.location.href");
                else
                    throw null;
            } catch (e) {
                if (e)
                    console.log(e);
                console.log("PASS: Could not read contentWindow.location.href");
            }
            testRunner.notifyDone();
        }
    </script>
</head>
<body>
    <p>The frame below should not load, proving that 'sameorigin, sameorigin' === 'sameorigin'.</p>
    <iframe style="width:500px; height:500px" src="http://localhost:8000/security/XFrameOptions/resources/x-frame-options-multiple-headers-sameorigin.cgi" onload="checkIfDone()"></iframe>
</body>
</html>