<!DOCTYPE HTML>
<html>
<head>
  <meta charset="utf-8">
  <title>Toplevel data navigation</title>
</head>
<body>
test2: data: URI in iframe tries to window.open(data:, _blank);<br/>
<iframe id="testFrame" src=""></iframe>
<script>
  let DATA_URI = `data:text/html,<body><script>
    var win = window.open("data:text/html,<body>toplevel data: URI navigations should be blocked</body>", "_blank");
    <\/script></body>`;
  document.getElementById('testFrame').src = DATA_URI;
</script>
</body>
</html>
