<!DOCTYPE html>
<html>
<head>
<meta http-equiv="Content-Security-Policy" content="block-all-mixed-content">
<script src="dump-securitypolicyviolation-and-notify-done.js"></script>
</head>
<body>
<!-- FIXME: For some reason a SecurityPolicyViolation event is not dispatched (why?) when the child frame load is blocked. -->
<iframe src="javascript:document.write('<img src=%22http://127.0.0.1:8000/security/resources/compass.jpg%22>');"></iframe>
</body>
</html>
