docshell/test/browser/file_csp_sandbox_no_script_js_uri.html

   1 <!DOCTYPE HTML>
   2 <html>
   3 <head>
   4 <meta charset="utf-8">
   5 <title>Test Javascript URI with no script</title>
   6 </head>
   7 <body>
   8 <noscript>no scripts allowed here</noscript>
   9 <a href="javascript:alert(`origin=${origin} location=${location}`)" target="_parent">click me</a>
  10 </body>
  11 </html>