<!DOCTYPE html>
<html>
<head>
<meta http-equiv="Content-Security-Policy" content="block-all-mixed-content">
</head>
<body>
<iframe id="iframe"></iframe>
<script>
var iframe = document.getElementById("iframe");
var markup = [
    "<style>body { background: green }</style>",
    '<img src="http://127.0.0.1:8000/security/contentSecurityPolicy/block-all-mixed-content/resources/red-square.png">',
    '<script>',
    'if (window.testRunner)',
    '   testRunner.notifyDone();',
    '</' + 'script>',
];

var blob = new Blob([markup.join("\n")], { type: "text/html" });
iframe.src = URL.createObjectURL(blob);
</script>
</body>
</html>
