[deny.html]
  expected: TIMEOUT
  [`DENY` blocks cross-origin framing with CSP frame-ancestors 'self']
    expected: TIMEOUT