dom/security/test/general/file_framing_xfo_embed_object.sjs


1
2
3
4
5
6
7

"use strict";

function handleRequest(request, response) {
  response.setHeader("Cache-Control", "no-cache", false);
  response.setHeader("x-frame-options", "deny", false);
  response.write("<html>doc with x-frame-options: deny</html>");
}