<!DOCTYPE html>
<html>
<body>
<script>
  "use strict";

  let src = document.location.href.replace("hsts_headers_framed.html", "hsts_headers.sjs");
  if (document.location.search == "?third-party") {
    src = src.replace("example.com", "example.org");
  }
  let frame = document.createElement("iframe");
  frame.setAttribute("src", src);
  frame.onload = () => {
    let done = document.createElement("h1");
    done.textContent = "done";
    done.setAttribute("id", "done");
    document.body.appendChild(done);
  };
  document.body.appendChild(frame);
</script>
</body>
</html>
