file_bug1452037.html (265B)
1 <html> 2 <head> 3 <meta charset="utf-8"> 4 <meta http-equiv="Content-Security-Policy" content="script-src 'sha256-47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU='"> 5 </head> 6 <body> 7 <a href="javascript:window.parent.postMessage({}, '*');">Click here</a> 8 </body> 9 </html>