<iframe src="about:blank"></iframe> | |
Eval should be blocked in the iframe, but inline script should be allowed. | |
<script> | |
window.onload = function() { | |
frames[0].log("<script>alert_assert(/PASS/); eval('alert_assert(/FAIL/);');<\/script>"); | |
frames[0].document.close(); | |
} | |
</script> |