iframe-do.sub.html (222B)
1 <!DOCTYPE html> 2 <meta http-equiv="Content-Security-Policy" content="img-src {{GET[img-src]}}"> 3 <script> 4 window.addEventListener('message', function(e) { 5 eval(e.data); 6 }); 7 top.postMessage('ready', '*'); 8 </script>