chromium/src/third_party/blink/web_tests/http/tests/security/contentSecurityPolicy/DOMParser-parseFromString-does-not-clobber-csp.html - manifest_repos/chromium_src - Git at Google

 <body>
 <script>
 if (window.testRunner)
   testRunner.dumpAsText();

 const doc = new DOMParser().parseFromString(`
     <meta http-equiv="Content-Security-Policy" content="frame-src 'none'">
     <body>></body>"`, "text/html");
 var i = document.createElement('iframe');
 i.src = "resources/alert-pass.html";
 document.body.appendChild(i);
 </script>
 </body>
	<body>
	<script>
	if (window.testRunner)
	testRunner.dumpAsText();

	const doc = new DOMParser().parseFromString(`
	<meta http-equiv="Content-Security-Policy" content="frame-src 'none'">
	<body>></body>"`, "text/html");
	var i = document.createElement('iframe');
	i.src = "resources/alert-pass.html";
	document.body.appendChild(i);
	</script>
	</body>