[deny.html]
  expected:
    if (os == "mac") and not debug: [OK, TIMEOUT]
    if (os == "android") and not debug: [OK, TIMEOUT]
  [`DENY` blocks same-origin framing]
    expected:
      if (os == "mac") and not debug: [PASS, TIMEOUT]
      if (os == "android") and not debug: [PASS, TIMEOUT]

  [`DENY` blocks cross-origin framing]
    expected:
      if (os == "mac") and not debug: [PASS, TIMEOUT]
      if (os == "android") and not debug: [PASS, TIMEOUT]

  [`denY` blocks same-origin framing]
    expected:
      if (os == "mac") and not debug: [PASS, TIMEOUT]
      if (os == "android") and not debug: [PASS, TIMEOUT]

  [`denY` blocks cross-origin framing]
    expected:
      if (os == "mac") and not debug: [PASS, TIMEOUT]
      if (os == "android") and not debug: [PASS, TIMEOUT]

  [`  DENY ` blocks same-origin framing]
    expected:
      if (os == "mac") and not debug: [PASS, TIMEOUT]
      if (os == "android") and not debug: [PASS, TIMEOUT]

  [`  DENY ` blocks cross-origin framing]
    expected:
      if (os == "mac") and not debug: [PASS, TIMEOUT]
      if (os == "android") and not debug: [PASS, TIMEOUT]

  [`DENY` blocks same-origin framing with CSP default-src 'self']
    expected:
      if (os == "mac") and not debug: [PASS, TIMEOUT]
      if (os == "android") and not debug: [PASS, TIMEOUT]

  [`DENY` blocks cross-origin framing with CSP default-src 'self']
    expected:
      if (os == "mac") and not debug: [PASS, TIMEOUT]
      if (os == "android") and not debug: [PASS, TIMEOUT]

  [`DENY` blocks cross-origin framing with CSP frame-ancestors 'self']
    expected:
      if (os == "mac") and not debug: [PASS, TIMEOUT]
      if (os == "android") and not debug: [PASS, TIMEOUT]