file_csp_sandbox_no_script_js_uri.html (277B)
1 <!DOCTYPE HTML> 2 <html> 3 <head> 4 <meta charset="utf-8"> 5 <title>Test Javascript URI with no script</title> 6 </head> 7 <body> 8 <noscript>no scripts allowed here</noscript> 9 <a href="javascript:alert(`origin=${origin} location=${location}`)" target="_parent">click me</a> 10 </body> 11 </html>