<!DOCTYPE html>
<html>
<head>
    <meta http-equiv="Content-Security-Policy" content="frame-ancestors 'none'">
</head>
<body>
    <p>Reporting Frame...</p>
    <script>
        function onMessage(event) {
            var p = document.createElement(p);
            p.textContent = event.data;
            document.body.appendChild(p);
            window.parent.postMessage(event.data, "*");
        }
        window.addEventListener(
            "message",
            onMessage,
            false
        );
        window.parent.postMessage("start test", "*");
    </script>
</body>
</html>