<!DOCTYPE HTML><html><head><title>HTML5 Sandbox: Allow XMLHttpRequest inside iframe with the sandbox attribute if sandbox='allow-same-origin'.</title><metacontent="text/html; charset=UTF-8"http-equiv="Content-Type"/><linkrel="author"title="Microsoft"href="http://www.microsoft.com/"/><linkrel="help"href="http://dev.w3.org/html5/spec/Overview.html#sandboxed-origin-browsing-context-flag"/><metaname="assert"content="Allow XMLHttpRequest in an iframe with the sandbox attribute if sandbox='allow-same-origin'."/><scriptsrc="/resources/testharness.js"></script><scriptsrc="/resources/testharnessreport.js"></script></head><body><scripttype="text/javascript">vart=async_test("Allow XMLHttpRequest in an iframe with the sandbox attribute if sandbox='allow-same-origin'.");functioncallback(event){t.step(function(){assert_true('sandbox'indocument.createElement('iframe'));assert_equals(event.data,"access to window.XMLHttpRequest");});t.done();}vartimer=setTimeout(callback,4000);window.addEventListener("message",callback,false);</script><divid=log></div><iframesrc="support/iframe_sandbox_027.htm"sandbox="allow-scripts allow-same-origin"style="display : none"></iframe></body></html>