third_party/WebKit/LayoutTests/http/tests/security/suborigins/resources/post-to-parent.php

   1 <?php
   2 if ($_GET["suborigin"]) {
   3     header("Content-Security-Policy: suborigin " . $_GET["suborigin"]);
   4 }
   5 ?>
   6 <!DOCTYPE html>
   7 <html>
   8 <script>
   9 window.secret = 'I am a secret';
  10 try {
  11     window.parent.secret = 'I am a secret';
  12 } catch(e) {
  13     // Ignore. The fact that secret hasn't changed in the parent will be
  14     // recognized in the parent.
  15 }
  16 window.parent.postMessage('Done', '*');
  17 </script>
  18 </html>