chromium/src/third_party/blink/web_tests/http/tests/security/resources/xss-DENIED-assign-location-protocol-attacker.html

<script>
var victim = parent;

victim.location.protocol = "http://localhost:8000/security/resources/xss-DENIED-assign-location-protocol-failure.html?";
</script>