1 2 3 4
<script> window.parent.postMessage('PASS (1/2): Script can execute', '*'); eval("window.parent.postMessage('PASS (2/2): Eval works', '*')"); </script>