file_parent_location_js.html

Enable keyboard shortcuts

<html>

<head>

  <title>Test setting parent location to javascript:</title>

  <meta http-equiv="Content-Security-Policy" content="script-src 'nonce-bug1550414'">

  <script nonce="bug1550414">

    document.addEventListener("securitypolicyviolation", (e) => {

      window.parent.postMessage({

        blockedURI: e.blockedURI,

        violatedDirective: e.violatedDirective,

        originalPolicy: e.originalPolicy,

      }, '*');

});

  </script>

</head>

<body>

  <iframe src="file_iframe_parent_location_js.html"></iframe>

</body>

</html>